last executing test programs: 2m13.115962735s ago: executing program 32 (id=198): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchmod(0xffffffffffffffff, 0x5) 2m3.188437602s ago: executing program 33 (id=356): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x104149, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002306000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x28, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000002000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000400000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000500850000000c000000b700000000000000950000000000000085100000fdffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000b00000000000000ffffff7f18200000", @ANYRES32=r0, @ANYBLOB="00000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110c00008500000006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x1000, &(0x7f00000009c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xe, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1], 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000006c0)={r5, 0x0, 0x81, 0x0, &(0x7f00000005c0)="b354e60b55e354abb3aca74966861ad6ce0967ee6e91321b1a2b5c26dc69c85e3d11f158744d785300423c0404279afe6b5fcfd7f2aab50f0731cad2ecfd46245db2ebfd4c12fa992a276abd666e195a376190e5eeb1f4947f1e67b40f76fff1eb8ef124bdc803b6f5dd19c8532162627235d6e601b8f194e3c63fc735a52c20d9", 0x0, 0x2, 0x0, 0xe, 0x0, &(0x7f0000000680)="4b3da7b12c43f199da38dec14964"}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r4, 0x0, 0x4}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 1m50.108585539s ago: executing program 34 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) process_madvise(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="6b370b5661f799a7d1", 0x9}, {&(0x7f0000000240)="8999027eebaf7185ec65f586e168a5513c5393b1", 0x14}, {&(0x7f00000002c0)="d92ba56dd580e83614274d89462e37ab3e8cdb7a2549d11a5b088ccce590dd3b8c814e77cc0c24c7afaa07e9854045cde6918e6cc18222961c97449fcf010e2dce2985666ce002854d140fbd0f616f962efe2e214d6979aacd3ecfbcd89056b34b6100fceacd9deccddf7d4b981245002a1d918f27aa5921c48e", 0x7a}, {&(0x7f0000000340)="d3545016f3a129bb41fd541c003764cc4586543059e01f00c9da31f4b903165df7223c5eeb6ddfed0969c487ac29ae5dde42f516cecaf97205704a5eab9c38854e0fa02fae87413237650a48c8c228a9eec4eb55a19fd28e7d7afaf26cd2f195bb937e76d95bc2dc3253cecaf57be39f90c919ab105fa2c612b693a4ec06e46b324e4579ee0ce72f68ed0e06efed6f8dc6092a00d4023138a1cccf50cf328fdad4f5ee6ef5d9097e9dfd3726d2d543a2d0d50612b9d0ca75b83cb1b9fdf9bf58f44430fa374690c70a4f943999", 0xcd}, {&(0x7f0000000480)="f746c9082db08625a2d6619b9f822031f0247d61eabda1cf960f399b189d2f8a919bc7b2b7c54c0b2f975c7d6f559d05af7636b73ff69928880ad956a42bdb5fa8a839782257b45fedd6f5852f0df90e9cb6275c76c632955f96c4a1a20c0d8f87a4d5729f7812175ac634610296885e6c6b60ce39132a9fe4ddb3831e2d2394db07b9730cf8040500ba6f4fc227355a9abdd728f22240a760955b2f3e55714a978498ffcbab64916f4c0e618c1e1fab265a5a87656941a49d9f43397958d9fcf0a57b2648e784e608261feab3fb64e5f5b594130e45c6c42c855d3e41e75f3a1064ba720f89ec17320db2a650aedfafd9dc", 0xf2}, {&(0x7f0000001180)="53789ca38a513a53ff78aa0866ca1c602ccd722fb0a1d08d2c9d13c97120f4ae9a86070ed8eb89e828c94f689c63093c65e3eba1b06b4128e483bf67cc2849002e92592ff647078559dade4a7d5cc846abb81b4b1e26709a44fbdd6ed57763fd88c3956272240995ed1d5b7d32e4258b98139c0e096303705fe49de63bf037729b63e0b4479314de4d2f9ba46d967e60c83bd4f905a24259e9fbf6e92c1dac1436b4450355d76f8626f47be0eeed300811230a81918a153355b3686cd3e2836cab996efa34d3ba8a3b7bfeee1c7129525edb4615e7feefd6b1dd280c90d529ae8a19bc4c126fe8addba553aae10b35b3e1d4443e2678c911337c1bce8eda94cdd2651f6b00d8a821344e6f78f2873cc7ab1a8a53362e3d41386baaf94de0b828485c35603eb691befcba641df472f4f6dfd328d4dd29babc78029e45570b58e346e480e8d8d63e166b8754956edfe21acaa34a96e0b0440044b2cf227b78930fd673c26bdf58bf5ce237f32337dea51484ae666cc40ec38cb51e0d80fb93cfe22d67aaab48a57ca19fe97638adeda7fdbfa6927810c502697b52de11db24d675faf1c3ded35b466d3549a39f22a43f04c995a11cf8db067c80349031074b64f63ba783a046332c2240e53a0d424681fc7fc2f4352f95d551139ae86a4feaab3c7dfec024c86b1c1cf946b92fc504e122b2901a76bb62310fe3353f108109fe58f38834da9a56b61f837d149f668ea63f3264d56b796264c741e074cad37aeca50850b72a966fa8961a345b4f757428a0ac2e655b7f296a8c22e1af1ab107813abda3ffad311c6aa21bb3130200c91be2cf5e168e9b7f27ecf51b6030c1d6e836926746d5e71b034478efba36ec97d8c0dc49a3730cb0e5ecfaf60064432c8c409a8bbc3f574df7ec550587aae304d034c618095a1789ce61255f514360f7edd58f18d588bf174a5c43599d5c6ea36b822d163ce20544f68b6912b7781786a2c8c75ef814400170f499dbb2c3162cd7fc0ad7b68d034aa38c06ddcb76fd79b81d5f60763bc843742380af3e5500ce4b747851f8c6c60ac50618f030e64d721817d6f893704d2ae958045e162efeb112107bfd0ac664af890bd2ebe9e882eafb51d8a05f093f34eda0423fcf913cfccd4b814e659f2885465a744240ec249f22b2b9697a77cb67d64631758b9025e6ba620f01e22626fb2d9d1f3681a1dc9496ee48efc9176644a05c3b659353b8fe9e94501dba7d04255c3baf23e80816a5c0201c11aae1299d6ee2a65e13f4d638236c13c25f9a68120970eff34adeb63ce716184700e231559f3ae879f4c0224212b879d9aeb63803188f0e137c18d401b241f5f0811b3bc4a1d8c25c36ef56bc9a27772ecabc22048d2613a75bad56e50f0464b483fe327fec43757c167963a57677c4f2d88700cbacef765fc1197ad74445653b30cc210d77fa4fbb8f538a8d76e2ad78148b4b54a7698d94901d7a62a84db7fe9e51f991d1c9f00df92c2e04e67a13ccd58e9f1486013a2aa91f7ce7394a4a41732e0a45a23fa12d7106f006c1d542d4df36dafc77b97b71860d9a243faeeb43dc7c7ddc1ab11a34d6e73082d3c8521d5a4379cb0be13daf3066cda4a4a6e5074751ecacbb76700a725e7c3e456d4f826d2a0a942a91c35679c4fc5772e010137091b6d3b4252302f54aa7d21eb7752ed59b615942955548aab6970a78a41fbfaf95d13c48917fc84969b0adc28f8b98638ecc21b09bcec3c0791be3fc35b2346d220a19f0e22b9a523fb2271ad51c6d0f9a8700e111a2c7c07770507b05909a7b989f4b27f04913bc2fbde559725ba11e36101798e10d0734a7d92d563e40a68c558dbb4841453f58a74a515fb2256e8ba19c9d1dd8a7bb83f7a5e72146db8a089ed2133807b1787faaeec75bb19c43073938cf4bba2fd113bf79091d98cdd5442c61c3547c18929f84beac34bbacf60a402c07e7ed9c041c58d12bd4ac69b2279978676b4d210c416c629bf025f54aa66fd732062fb8b1f797fd9ef0fed6caf93892e1da5c064fe69fabb7ba82e2f23a968ce470d45ca4a4d2de3ec066a63e453cdf01b67dfbe89b62b5359fc9c1da3cb3ba2e78f7b468d1600e70cedea136798d2c3a0357fae1b797b13e4f10f812ced5341489dfd67578097b9a3e321d1d5041f0273ac98b9787e2ba8209f4df3e50b49cb7da3604c62c90316f274e63ddbd59fab1f05a3d43f68b637454cd6d0b62af5a1ae15be9a1edae8d5956c467a86dbe2188e19255bd34e69c1c5ee639b312096a7f03ae677292fa81320dc1edcd0f2946b0ca9b76bf249e4df0ebcb10e2618f81082de211a9af1ae767f9ecba4b4704d1fed0d8fa96314b5db8a6e8783f40c6aefe68a577ca2cbd549ce53b676878b1b47972a75d2ab8e79dbf7333d3b500d4350a9b56cd8d5c81c3ea66a5c6be6fb773a7958b08328cd454b20613840182bf07ebe3f32d2b4f690759db84d0082b295f76a4e90227c64d9e53de1d600e60842156cbc7ad73a5b4ef241f602369a385a8e93aade2cbc020db9951b361f2b9b19b32bd8f11354e1fed332729b48ed422f0e44859fe4d2fdd3df3feb2e6c76b897aab4dbe1dfebc126e60aa0702da2d6dc94bfd0df63be09fd6a72f73327743f4bf0299845a1534a5371721ef80b44cb154926f4dc223a14fdfdaa468620b032041de91d8a2aa66fecba32f2c719d38ee4bc94a73216950f96b461a1f5a46ece4a2eed778947d8dd6327fff817280de13dae705191ef7751a84af4d827e6fa1b1810034a17870ea31f1bb57410817e261988a86b3e86d111b2df8a5139cd0ff9bbe5b943290248b5e00295e70c5ac9bfa26723804006e98b204f87fd1cf7778025c66a55d9af9bec3eb8f52b4e85a47f266fbb2d2179413506ba9a602525e00306919bd9651869e9f5e9b00f8f2a72f99b251afb878ad9803548cfce903f0418f5069dbfdc1cfae3d4e0bd29fe8605497c37e0247a0d5956e51be71a219d1b06282522bd3836e445b3a14da4d9082b9331cfacb241be2f8ef28400c002ed168e8692fc87413efb4d3bf062907462065fdd23139ce1c9935ca7220719c38d44c92082c2533140f17dd53c20a81c8c7040e6c83812c35c96429f29165383585894892dd956d8bb0f2f64d92713a4f8d99e8614c9baa609d0f3722dd87672369a7646ac56c975c9787f98227e4605ee3d5d0998f338ec8c16fe816a611d7af06734af98e18b0ce2c2cec4eea33e63a48292d7cce0d028752e15c825fc2256ae82f7cfc01527f5f7315d63bd24f6cc1c11673d7fea5c5c8de5bf25165af85fa746636849644dde3c816a05c3011cdf12e1aa005f552de24881d4c912c2933ae49e576ee8f45afbb45898492701e940cbc56594bbc000d9f438e20f58bc73b404a335466d98add5a6a01e522506ac08f02f359ccb289c7c143ccf2c6bdb910cfb1aae0a91ff056cdd8aba32b1c277377664215dd063a1b6ff4afee8583353cf90bbcc4110607db426a6f9b411480e5ec8136dedb022a58902dffd1d1f1fad44652aedac6f3243e54c79bdada510af9045b58f22db4388e00ad91f23f9c463fa64bc877be7007c80c5598a267162784588d194d31ffa836a84447b09c9c6cb156dcf9aa2db07086737284d218d9a0cb3c4c4ac70683b43aed718f42cee1e5eb3cc05dd4ce6b3136e9543c5b1cafd57431966f8ca9bc9a444b7b7a1b98db01e0446a307707ab52ecd7e24b09dce3e0118ef53b4b72a0615c44cf96f52d387371f30cecc072085251933de2edbcf684bae26fe3e6a51691028bf26d55711e396db1d09244c3a8af4b976f801afe985da27123496e5fab67902c6247fc629cbf404527c8c46808dabd8ab450e9025fd0c6bfb23fd9bedd2a23bd3a5997dc4d15aeb65569a00da3763d474400bfd8fbf940f4ac50800cffc240d88a920efb4bee42cd51ed601f53e74d9d188be5b44a1e0e07aa5934fa3f9d3d91707f8b33cc4e5c09e1d6ab2ac76c34e79a3b94430dd6bb3fefc45bf6c95bd12382a9a7b09f41c435e3b0b58c721a11d2746a116ab34143cf1291f76402faf9f7593c52012d87847aa5e0681bc16d69717768c905cbc23c296d97ac4514aeda3fb83fce689e084afabd72384dc420c0d059a6d2c77da53533097fc4bf18cd1b2fee3034526b7b7e2e49a5677ce9f375cba292ca8583eb2b9ccb71973a1586d4d3b4bc124627cc0ceb569a37fda45b23d6b6e7d96d8131cbfd9b80138068157a0019d44675ca9b1010f206a5b248ba858dbe207be8460ea4b1aaaf3653966b38801436c77c920bc8f29f8dfa9ffd568f19832dbd2b22bf65a81066cb67596e57414d061069ea87171ac46f6a3a021ae0a8000bc09fb4b23bdd40c0b1ae541ffc61e76c0c863de11d0eedca8b4e1b08b098bf5d83f8ba98461f8dd6de69c5001abe6466aaaeb0f2e78e97894f686cca064e90fca46829b1df1294f21267c3f815adb8280465727d18182218c55db59b224cc48b57a8096a4597458479bb01ff0d325f9c74b4ac68e2f690dd4e30f04eb7706b4a4ce427dfad159ed64e24162e3ff145bd2aa687633095cc4278438c025eb61fbd98f527395a0227a20dd85f019ff26dab1512e1f224d7ea5bf31cd3baa9b7e306903cf9857e7ff4d9acbb444b4677fb13929a21b4bf7543ef72df02e102a8012f3460da357cec3b0deca5068d83f160809059ea63058c71d4cfd44116f90b9236097039b046ca599d2d486526d81b0298e80eb562699047e0ce552492674162a645087f7ed6ca5f6dd68b105be03a2bcd59cfe7fd66980deef53251129e3349491bf5ccbffa92e8cc838f05aa5b77ce1b3071b785bac1e9401dd9d3f7e0b0e84c6b123c2ebc08dc7e0e8eb887bfa5f56b3cf7eacd9f2948fa11ebd513d1819c710628f5f037f4878742502ae94611adbe4b796bac5a52f606f11091809fb75a0ec3f668c38c9e2d79888df2664216f6ed2637fe713418745fefd1f81fd2f898407392b716252d57ae1a0beaefe998e81858fcb878b3c7255b5595afba16e80ac59915864d508be6db298765d6b5b76513765c2ce721d387730b9101296439d93aed118ab660a00d855537e9bc1712dfd8abd40c4ac139d1ff4f7602eab4963b7d802e1c591413407d3364c05d137c782923d81448717557590cd4e19f756468e8f87b8f4ca676fed9564fa0a854eb3a5ab2067de4d9be01530686aae6525c828ebbe423f263fa819aee72f9d059c71cf5d3a9f4593da9d267cc2a9769207e037964f78f30ed2d002764d7ecf0d135e8461fb61bdd7fcf7dd6efaf1b3138d60d5127742b4abfee44086eb508a72d57e05e74357381dbafb6f2d73e2814b306a24d9530a14309799ced1bf1d1065231940df41ffb9a0cb60ba5df0b5aa15f55e235fc80db658d519d737f6cc4eeab5ca5356b2078b7e31dce5f1eb58ac48dd474fd099d9587e94876944b6a92a01bd2e5ee4dce03af8e4afc00a129f19374fa187015a5598acab5137dba94c14962afaacd18a2e3dccf5702b25c3646c30515abac89fe0d9135ad8343ff13616591d6e4f842e3de94d9174bcdad976699b4e62143cbecb6c4af335b2f9b6cac820154f46a9d71478c83aadb4ff013046111bb6e62fd5228ca239c17a9f3dd8677a34b4b5c494bf4f6c8fa1bf559b6e98b241b7f043cec76156f679b0166f55977a806f23ec3dffae50ba82e62e242ade85716a44c71b0633089b82dc58190c5e7b9a871de447ffd416d5273aed9f104a288eea39a35e910338e", 0x1000}], 0x6, 0x9, 0x0) 1m48.487494344s ago: executing program 3 (id=518): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = io_uring_setup(0x1210, &(0x7f0000000b80)={0x0, 0x0, 0x80, 0x3, 0x328}) timer_create(0x1, &(0x7f0000000b00)={0x0, 0x6, 0x4}, &(0x7f0000000b40)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000002080)={0x0}, 0x1) rt_sigaction(0xc, &(0x7f0000000280)={0x0, 0x18000002, &(0x7f0000000240)="660fe86d9dc4c24d03b37800000036dec03e410fa04783f207c4c2f924ea66410ff1c7f245e700f30fe6860080000045d97b08", {[0x9]}}, &(0x7f0000000380)={&(0x7f0000000300)="c4e179c5c300c4a109d1a8630000000f4b17f39026c02d567b64c70047ab65f600e66464f3420f1ef4c4817817b9000000006766430f50fb", 0x0, &(0x7f0000000340)="47ab0f5209450f620fc4033502e700c4c3d97855c3270fd8d0674e0f38f683bf00000064f0f757c766400f381df58fe868ee577f02"}, 0x8, &(0x7f00000003c0)) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) ioprio_set$pid(0x2, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000008c0)='./bus\x00', 0x6000, 0x1, &(0x7f0000000900)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000a00)={[{@inlinecrypt}, {@grpid}, {@noquota}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x1a0, 0xd0, 0xd0, 0x3f0, 0xd0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @loopback, [], [0x80], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x46}}}, {{@ipv6={@private0, @remote, [0x0, 0x0, 0xffffff00], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0xb842}}}, {{@ipv6={@loopback, @private2, [0xffffff00], [], 'syzkaller1\x00', 'veth0_to_batadv\x00', {0xff}}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000de63000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c9000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x541b, &(0x7f0000000300)) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) 1m48.336699493s ago: executing program 3 (id=521): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1m48.271870493s ago: executing program 3 (id=522): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x326b, 0x6c05c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd7, 0x3, 0x4, 0x100000001, 0x20000008, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x806, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="30010000120001000000000000000000100000000c0000000000000000000000100102"], 0x130}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) socket$inet6(0xa, 0x3, 0x2f) unshare(0x68040200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000800000061114c0000000000850000001c00000095000000dde7404c"], &(0x7f0000000380)='GPL\x00', 0x8, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0/file0\x00'}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000300)=@ieee802154, 0x80, &(0x7f0000004c80)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/204, 0xcc}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000000900)=""/243, 0xf3}, {&(0x7f0000004b00)=""/178, 0xb2}, {&(0x7f0000004bc0)=""/160, 0xa0}], 0xa, &(0x7f0000000500)=""/88, 0x58}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000600)=""/161, 0xa1}], 0x1, 0x91, 0x2) socket$packet(0x11, 0x0, 0x300) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m48.128968473s ago: executing program 6 (id=527): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @multicast, 'geneve0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r0) 1m48.084633462s ago: executing program 6 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='mm_page_free\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000b40)=""/4096, 0x1000, 0x0, &(0x7f00000005c0)=""/224, 0xe0}}, 0x10) ioctl$EVIOCGABS20(r5, 0x40044591, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x40521}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20004084) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000600)={'#! ', './file0', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9\xd3\x06L\xbf\x1a\xf1}M79?L\x98e\f\xb5\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\xf7\xf0\xae\xf7\xe22\x80[\xc62\'\x8e\xafC!b\x12\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xf9H\xa2\xa8\x83\xcb\x1c\xdd\xdc\xd2}\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca.\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00'/233}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0hJ\xd6\xc4]\xca\xf1\x8f}|\xf5Z\x9c\xc9\x1f\xd9P'}, {0x20, 'ro\x00'}, {0x20, ':\xf8@\xa5\xd1\xf7\x89md\x1d\x92\x8b\x12\xda\xce\x17a6\xeb`\xd8\xaa\xbc\xed\xcf\xe8\xa0>\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r4, @ANYBLOB="000829bd7000fbdbdf2515000000050029000100000008002c00ffffff7f08002c000700000008000300", @ANYRES32, @ANYBLOB="24002b8008000400ff03000008000100000000000800040005000000080004000100000008000300", @ANYRES32=r5, @ANYBLOB="4c002b8005000200030000004000038006000100020000000c00040000000000000000000c0004000200aaaaaaaaaaaa0c0004000202aaaaaaaaaaaa060003000000000006000300a1aa000008002a0007023c8ae7000300", @ANYRES32=r6, @ANYBLOB="0c0006000300000003000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4025}, 0x885) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pimreg0\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 1m47.40171784s ago: executing program 3 (id=539): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) 1m47.12478549s ago: executing program 6 (id=540): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, r1, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/134, 0x86}], 0x1) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800"/16, @ANYRES64=r0], 0x80}}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@debug}, {@usrquota}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000f00)={0x7, 0x6, 0x0, 0x1, 0x0, 0xfffffffeffffffff, 0x0, 0xefffffffffffffff, 0xffffef11}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) capset(&(0x7f00000003c0)={0x20080522}, &(0x7f0000000400)={0x2, 0x6, 0x0, 0x3, 0x7, 0x3c}) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000040)={0x0, 0x3, 0x2000, 0x4, 0xa, "90737f0108ff3b52cca11c09ffeb00"}) r7 = dup(r6) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x8, 0x0, 0xffff, 0x82fa, 0x0, "0911000000000300"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)=0x8) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0xff) sync() 1m47.124528889s ago: executing program 0 (id=541): syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x800}, 0x18) socket(0x1, 0x4, 0x0) r1 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x400002, 0x36a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) unshare(0x28000600) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x18) 1m47.124049899s ago: executing program 35 (id=540): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, r1, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/134, 0x86}], 0x1) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800"/16, @ANYRES64=r0], 0x80}}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@debug}, {@usrquota}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000f00)={0x7, 0x6, 0x0, 0x1, 0x0, 0xfffffffeffffffff, 0x0, 0xefffffffffffffff, 0xffffef11}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) capset(&(0x7f00000003c0)={0x20080522}, &(0x7f0000000400)={0x2, 0x6, 0x0, 0x3, 0x7, 0x3c}) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000040)={0x0, 0x3, 0x2000, 0x4, 0xa, "90737f0108ff3b52cca11c09ffeb00"}) r7 = dup(r6) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x8, 0x0, 0xffff, 0x82fa, 0x0, "0911000000000300"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)=0x8) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0xff) sync() 1m47.091669699s ago: executing program 36 (id=541): syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x800}, 0x18) socket(0x1, 0x4, 0x0) r1 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x400002, 0x36a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) unshare(0x28000600) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x18) 1m47.088963339s ago: executing program 3 (id=544): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 1m46.585843418s ago: executing program 3 (id=548): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x326b, 0x6c05c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd7, 0x3, 0x4, 0x100000001, 0x20000008, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x806, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="30010000120001000000000000000000100000000c0000000000000000000000100102"], 0x130}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) socket$inet6(0xa, 0x3, 0x2f) unshare(0x68040200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000800000061114c0000000000850000001c00000095000000dde7404c"], &(0x7f0000000380)='GPL\x00', 0x8, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0/file0\x00'}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000300)=@ieee802154, 0x80, &(0x7f0000004c80)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/204, 0xcc}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000000900)=""/243, 0xf3}, {&(0x7f0000004b00)=""/178, 0xb2}, {&(0x7f0000004bc0)=""/160, 0xa0}], 0xa, &(0x7f0000000500)=""/88, 0x58}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000600)=""/161, 0xa1}], 0x1, 0x91, 0x2) socket$packet(0x11, 0x0, 0x300) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m46.546181107s ago: executing program 37 (id=548): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x326b, 0x6c05c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd7, 0x3, 0x4, 0x100000001, 0x20000008, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x806, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="30010000120001000000000000000000100000000c0000000000000000000000100102"], 0x130}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) socket$inet6(0xa, 0x3, 0x2f) unshare(0x68040200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000800000061114c0000000000850000001c00000095000000dde7404c"], &(0x7f0000000380)='GPL\x00', 0x8, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0/file0\x00'}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000300)=@ieee802154, 0x80, &(0x7f0000004c80)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/204, 0xcc}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000000900)=""/243, 0xf3}, {&(0x7f0000004b00)=""/178, 0xb2}, {&(0x7f0000004bc0)=""/160, 0xa0}], 0xa, &(0x7f0000000500)=""/88, 0x58}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000600)=""/161, 0xa1}], 0x1, 0x91, 0x2) socket$packet(0x11, 0x0, 0x300) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m25.372747939s ago: executing program 7 (id=914): socket$inet_dccp(0x2, 0x6, 0x0) epoll_create1(0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) fallocate(r0, 0x3, 0x5000000, 0x8000c62) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x47, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c20000000180c200000086dd6001070000000000000000ff02000000000000000000000000000100000e2200119078f5c09875f8b126"], 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2004410, &(0x7f0000000480)={[{@nojournal_checksum}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000a057182911f4280000290000000b000000af00000500000000"], 0x18}, 0x40001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0xa01}, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x1, 0x32, 0x0, @rand_addr=0x64010102, @multicast1}, {0x4e21, 0x0, 0x8}}}}}}, 0x2e) 1m25.274886698s ago: executing program 7 (id=917): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) open_by_handle_at(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="08000000020000000b"], 0xa000) 1m25.192626498s ago: executing program 7 (id=919): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400), 0x94500, 0x0) write$P9_RREAD(r0, &(0x7f00000004c0)={0x37, 0x75, 0x2, {0x2c, "9380c33955e3d9a17602238bc5c7c36b04b72f051d6101e7caa26f3737c29be778a88f8e41750292e440b309"}}, 0x37) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket(0x2, 0x3, 0x100000001) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r10}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @empty}}, 0x0, 0x0, 0x3a, 0x0, "3f114438efdaca16d374b49a365be44d5e860eba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be9942e6f1c395ddb8160381baadf27900"}, 0xd8) 1m25.124610578s ago: executing program 7 (id=922): r0 = getpid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r1, 0x0, 0x0, 0x1001f0) fallocate(r1, 0x8, 0x0, 0x10000) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone(0xd5b22180, 0x0, 0x0, 0x0, 0x0, 0x0) 1m25.024619617s ago: executing program 7 (id=925): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = io_uring_setup(0x1210, &(0x7f0000000b80)={0x0, 0x0, 0x80, 0x3, 0x328}) timer_create(0x1, &(0x7f0000000b00)={0x0, 0x6, 0x4}, &(0x7f0000000b40)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000002080)={0x0}, 0x1) rt_sigaction(0xc, &(0x7f0000000280)={0x0, 0x18000002, &(0x7f0000000240)="660fe86d9dc4c24d03b37800000036dec03e410fa04783f207c4c2f924ea66410ff1c7f245e700f30fe6860080000045d97b08", {[0x9]}}, &(0x7f0000000380)={&(0x7f0000000300)="c4e179c5c300c4a109d1a8630000000f4b17f39026c02d567b64c70047ab65f600e66464f3420f1ef4c4817817b9000000006766430f50fb", 0x0, &(0x7f0000000340)="47ab0f5209450f620fc4033502e700c4c3d97855c3270fd8d0674e0f38f683bf00000064f0f757c766400f381df58fe868ee577f02"}, 0x8, &(0x7f00000003c0)) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) ioprio_set$pid(0x2, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000008c0)='./bus\x00', 0x6000, 0x1, &(0x7f0000000900)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000a00)={[{@inlinecrypt}, {@grpid}, {@noquota}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x1a0, 0xd0, 0xd0, 0x3f0, 0xd0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @loopback, [], [0x80], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x46}}}, {{@ipv6={@private0, @remote, [0x0, 0x0, 0xffffff00], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0xb842}}}, {{@ipv6={@loopback, @private2, [0xffffff00], [], 'syzkaller1\x00', 'veth0_to_batadv\x00', {0xff}}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000de63000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c9000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6a5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x541b, &(0x7f0000000300)) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) 1m24.396189865s ago: executing program 7 (id=936): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x104149, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002306000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x28, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000002000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000400000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000500850000000c000000b700000000000000950000000000000085100000fdffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000b00000000000000ffffff7f18200000", @ANYRES32=r0, @ANYBLOB="00000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110c00008500000006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x1000, &(0x7f00000009c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xe, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1], 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000006c0)={r5, 0x0, 0x81, 0x0, &(0x7f00000005c0)="b354e60b55e354abb3aca74966861ad6ce0967ee6e91321b1a2b5c26dc69c85e3d11f158744d785300423c0404279afe6b5fcfd7f2aab50f0731cad2ecfd46245db2ebfd4c12fa992a276abd666e195a376190e5eeb1f4947f1e67b40f76fff1eb8ef124bdc803b6f5dd19c8532162627235d6e601b8f194e3c63fc735a52c20d9", 0x0, 0x2, 0x0, 0xe, 0x0, &(0x7f0000000680)="4b3da7b12c43f199da38dec14964"}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r4, 0x0, 0x4}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x200000}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r9, 0x567, 0x0, 0x0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f80)=ANY=[@ANYBLOB="941100004a00ff0000000000000000000a00", @ANYRESDEC, @ANYRES32], 0x1194}}, 0x0) 1m24.380408685s ago: executing program 38 (id=936): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x104149, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002306000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x28, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000002000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000400000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000500850000000c000000b700000000000000950000000000000085100000fdffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000b00000000000000ffffff7f18200000", @ANYRES32=r0, @ANYBLOB="00000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110c00008500000006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x1000, &(0x7f00000009c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xe, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1], 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000006c0)={r5, 0x0, 0x81, 0x0, &(0x7f00000005c0)="b354e60b55e354abb3aca74966861ad6ce0967ee6e91321b1a2b5c26dc69c85e3d11f158744d785300423c0404279afe6b5fcfd7f2aab50f0731cad2ecfd46245db2ebfd4c12fa992a276abd666e195a376190e5eeb1f4947f1e67b40f76fff1eb8ef124bdc803b6f5dd19c8532162627235d6e601b8f194e3c63fc735a52c20d9", 0x0, 0x2, 0x0, 0xe, 0x0, &(0x7f0000000680)="4b3da7b12c43f199da38dec14964"}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r4, 0x0, 0x4}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x200000}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r9, 0x567, 0x0, 0x0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f80)=ANY=[@ANYBLOB="941100004a00ff0000000000000000000a00", @ANYRESDEC, @ANYRES32], 0x1194}}, 0x0) 43.486039242s ago: executing program 2 (id=1796): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x104149, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002306000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x28, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000002000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000400000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000500850000000c000000b700000000000000950000000000000085100000fdffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000b00000000000000ffffff7f18200000", @ANYRES32=r0, @ANYBLOB="00000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110c00008500000006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x1000, &(0x7f00000009c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xe, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1], 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000006c0)={r5, 0x0, 0x81, 0x0, &(0x7f00000005c0)="b354e60b55e354abb3aca74966861ad6ce0967ee6e91321b1a2b5c26dc69c85e3d11f158744d785300423c0404279afe6b5fcfd7f2aab50f0731cad2ecfd46245db2ebfd4c12fa992a276abd666e195a376190e5eeb1f4947f1e67b40f76fff1eb8ef124bdc803b6f5dd19c8532162627235d6e601b8f194e3c63fc735a52c20d9", 0x0, 0x2, 0x0, 0xe, 0x0, &(0x7f0000000680)="4b3da7b12c43f199da38dec14964"}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r4, 0x0, 0x4}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x200000}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r10, 0x567, 0x0, 0x0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r9, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r13, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r14 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f80)=ANY=[@ANYBLOB="941100004a00ff0000000000000000000a00", @ANYRESDEC, @ANYRES32], 0x1194}}, 0x0) 43.438735381s ago: executing program 2 (id=1797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 43.418894251s ago: executing program 2 (id=1798): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0xa01}, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x1, 0x32, 0x0, @rand_addr=0x64010102, @multicast1}, {0x4e21, 0x0, 0x8}}}}}}, 0x2e) 43.223989741s ago: executing program 2 (id=1799): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x11410c0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1065841, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f00000000c0)='./file0/file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xfed2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r6, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000081000000", 0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, [0x6, 0xfff, 0xb21, 0x101, 0x2, 0x6b55, 0x9, 0x4000000, 0x10000, 0x81, 0x1ffe00000000, 0xffff, 0x7, 0x2, 0x100000001]}, &(0x7f0000000140)=0x100) 43.223393891s ago: executing program 2 (id=1800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a5000000500000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100) 42.9928538s ago: executing program 2 (id=1803): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) 42.95567314s ago: executing program 39 (id=1803): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) 2.600255298s ago: executing program 4 (id=2515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000e0000429154a62f9d08c5"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) write(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r3, 0x2000) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munlockall() r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x21000) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r5, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7, 0x0, 0x400000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) recvmmsg(r4, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240), 0x3, 0x45b, &(0x7f00000010c0)="$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") utimes(&(0x7f0000000280)='./file0\x00', 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 1.708731225s ago: executing program 4 (id=2535): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x14801, 0x0) ioctl$TCFLSH(r1, 0x40045436, 0x3) r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x20042) writev(r2, &(0x7f0000003540)=[{&(0x7f0000002340)}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20440, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000100)={0xc, 0x2d, 0x11, 0x4000001a, 0xa, 0xa, 0x5, 0xa4}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r5}, 0x3d) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='hrtimer_start\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) dup2(r7, r7) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffffe]}, 0x8) accept4$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, &(0x7f00000003c0)=0x6e, 0x0) read(r8, &(0x7f0000000740)=""/384, 0x200008c0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110040"], 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000bc08e1a53a3d1371e67400000000280000002800020006f977000000040000000000000e0300000000000000000000000000000d03000000000000000000000d00000000000000003ba9c884bf3d5dc4c49283b84f1bb7f0386d19ece2eb5c139cadca540020b5f37ce6abb39046a0610b68d93f09cc8ed304c3e036952f81bce69c48c88932be503752f61c0d035e56253512622de60bab16a96821e28dc2519df17f9903b742c14b5fb02521d0443ac36d5dfa488cdc5c64ff6d1798a6f0e1649d48a0202cea5028a41c6edf1237503aa793da9b88449116"], 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) dup(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000010000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r9], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES32=r10], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0xa921}, 0x18) 1.452389105s ago: executing program 4 (id=2537): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) 1.434372905s ago: executing program 4 (id=2538): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006f6429c2568adbf5842c33954baeaf4b6d596598bd7f490d502a9a46f951f627a730a7f75827f175111d8eaf8d361f0383ec2807ebe8e41f590d24442d4c23f129601018ef8c4e0d06b3acb61fe312f8338e9c79d199aebb012fead3fee6a6ea3df036ae581a4b5cb7cebd77c93d3147a8528823b1dd5487a1805e82889c61a7272adb29d042a678ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x4, 0x7fe2, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000740), 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x20000004e23}}) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000002c0)='./file0\x00', 0x6000108) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r5}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/157, 0x9d}, {&(0x7f0000000400)=""/135, 0x87}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f00000004c0)=""/197, 0xc5}], 0x4, &(0x7f00000005c0)=""/119, 0x77}, 0x2020) 1.182113463s ago: executing program 8 (id=2542): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000100010009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_free_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.089655934s ago: executing program 8 (id=2545): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = io_uring_setup(0x1210, &(0x7f0000000b80)={0x0, 0x0, 0x80, 0x3, 0x328}) timer_create(0x1, &(0x7f0000000b00)={0x0, 0x6, 0x4}, &(0x7f0000000b40)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000002080)={0x0}, 0x1) rt_sigaction(0xc, &(0x7f0000000280)={0x0, 0x18000002, &(0x7f0000000240)="660fe86d9dc4c24d03b37800000036dec03e410fa04783f207c4c2f924ea66410ff1c7f245e700f30fe6860080000045d97b08", {[0x9]}}, &(0x7f0000000380)={&(0x7f0000000300)="c4e179c5c300c4a109d1a8630000000f4b17f39026c02d567b64c70047ab65f600e66464f3420f1ef4c4817817b9000000006766430f50fb", 0x0, &(0x7f0000000340)="47ab0f5209450f620fc4033502e700c4c3d97855c3270fd8d0674e0f38f683bf00000064f0f757c766400f381df58fe868ee577f02"}, 0x8, &(0x7f00000003c0)) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) ioprio_set$pid(0x2, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000008c0)='./bus\x00', 0x6000, 0x1, &(0x7f0000000900)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000a00)={[{@inlinecrypt}, {@grpid}, {@noquota}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x1a0, 0xd0, 0xd0, 0x3f0, 0xd0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @loopback, [], [0x80], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x46}}}, {{@ipv6={@private0, @remote, [0x0, 0x0, 0xffffff00], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0xb842}}}, {{@ipv6={@loopback, @private2, [0xffffff00], [], 'syzkaller1\x00', 'veth0_to_batadv\x00', {0xff}}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000de63000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c9000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6a5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r6, 0x541b, &(0x7f0000000300)) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) 1.030193413s ago: executing program 9 (id=2547): r0 = socket(0x2a, 0x2, 0x0) r1 = syz_pidfd_open(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000340)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) unshare(0x26020480) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setgroups(0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe17aaf4ffa4916b8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r4, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xf}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 950.374863ms ago: executing program 1 (id=2549): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703040000000000000000000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8002, 0x0) fcntl$setlease(r4, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev(r7, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 949.368393ms ago: executing program 9 (id=2550): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x17, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="f61034d0570500002d11036dd88dc26a5b2d3061ffff10006809b877a6329996745b880f9fb4343c9008d693a8291fd74fc1cac69e1bc7faf699496258ed0449e7e20b077ad3e1534abaef69766bcf12c2227b1a0da5f261653a33b4896afbdd145aed1b3f8ce570c64cd86f2140284cac22ac6c163e42641a73945ada6cdf1f878d3af919df6499b14772f55eeeae5e2e08edcbbb3968cf498a122af8a21889b43910ee977d92c2d80541"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x81, &(0x7f0000000740)=""/129, 0x41000, 0x47, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x4, 0xc, 0x7fff, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r0, 0x1], &(0x7f0000000b40), 0x10, 0x8b, @void, @value}, 0x94) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0x1, 0x0, 0x0, 0x42, 0x5c}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES64=r2, @ANYRES64=r3, @ANYRESHEX=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x200000000200}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_robust_list(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0x8, 0xffffffb3, 0x0, 0x4, 0xf03}) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3ff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) 919.172573ms ago: executing program 5 (id=2551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 908.447952ms ago: executing program 8 (id=2552): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1d"}]}], {0x14}}, 0x70}}, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000000280)='./file0\x00', 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d00)=ANY=[@ANYBLOB="510100001000130700000000000000007f0000010000000000000000000000000000000000778e58be7f97e97500000000000000000000000088f7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004006a0000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 826.656653ms ago: executing program 1 (id=2553): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r6, &(0x7f0000001080)={0x860, 0x20, 0x3, 0x20, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x17, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc4a4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x12}, @jmp={0x5, 0x1, 0x1, 0x9, 0x5, 0x30}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe935, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000500)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xc, 0x7, 0x80000001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r2], &(0x7f00000006c0)=[{0x5, 0x5, 0xe, 0xa}, {0x5, 0x4, 0x9, 0x8}, {0x0, 0x5, 0x1, 0x6}], 0x10, 0x7fff, @void, @value}, 0x94) r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) close_range(r3, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000340)='./file0\x00', r8, 0x4000, r9}, 0x18) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a40)={0x14, r1, 0xe701ac47a3d23ecd}, 0x14}}, 0x800) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x453, 0x20, 0x70bd2c, 0x25dfdbfe, "3c944b485bbb69680f437ab692541ca4d16530", ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40408e5) socket$kcm(0x29, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 773.662832ms ago: executing program 1 (id=2554): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000600)='./file2\x00', 0x404, &(0x7f0000000240), 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") acct(&(0x7f0000000000)='./file1\x00') 769.030123ms ago: executing program 8 (id=2555): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_free_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 676.139992ms ago: executing program 5 (id=2556): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x20}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) renameat2(r1, 0x0, r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r6 = semget$private(0x0, 0x4000000009, 0x408) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) ioprio_get$pid(0x2, 0x0) semop(r6, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) semtimedop(r6, &(0x7f00000000c0)=[{0x4, 0x6, 0x1800}, {0x2, 0x4, 0x1800}], 0x2, 0x0) 648.581962ms ago: executing program 8 (id=2557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1d"}]}], {0x14}}, 0x70}}, 0x0) 566.732092ms ago: executing program 8 (id=2558): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xdc, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000600), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@struct={0x5, 0x5, 0x0, 0x4, 0x0, 0x1, [{0x10, 0x0, 0x5}, {0x1, 0x2, 0x38}, {0x0, 0x1, 0x8}, {0x1, 0x4, 0x2}, {0x5, 0x3, 0x1}]}]}, {0x0, [0x2e, 0x5f, 0x61, 0x2e, 0x0, 0x30, 0x0, 0x30]}}, &(0x7f00000009c0)=""/133, 0x6a, 0x85, 0x1, 0x8, 0x2c08dc3c321449d4, @void, @value}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb010018000000000000008d0000008d000000040000000c0000000000000b040000000c0000000000000b05000000020000000200000f0100000004000000020000005200000001000000af110000feffffffa404000000010000060400000000000000080000000500000004000084080000000900000000000000ff7f00000800000005007cdac8f53572580f0fdd000006000000081e0000010000000d0000000500000023000000f8"], &(0x7f0000000d00)=""/118, 0xac, 0x76, 0x0, 0xf4, 0x0, @void, @value}, 0x28) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$dir(0xffffffffffffff9c, 0x0, 0x41, 0x11d) lchown(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000dc0)={0x0, r2}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, 0x0, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x1, 0x5, 0xc, 0x48000, r0, 0x7, '\x00', r1, r2, 0x3, 0x3, 0x1, 0x3, @value=r3, @void, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r11}, 0x10) close_range(r10, r10, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESHEX=r11, @ANYRESDEC=r10, @ANYRESOCT=r11], 0xf5, 0x305, &(0x7f0000000080)="$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") open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) 554.995672ms ago: executing program 4 (id=2559): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20040600) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$qrtr(0x2a, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2f00000008f4610d0a"], 0x20) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001140)={[{@noblock_validity}, {@dioread_nolock}, {@acl}, {@noinit_itable}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}, {@bh}], [], 0x2c}, 0xc4, 0x452, &(0x7f0000000480)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x0, 0x0}) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 550.449381ms ago: executing program 9 (id=2560): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 520.813301ms ago: executing program 1 (id=2561): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x1}, 0x18) pwritev(r0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) 519.675042ms ago: executing program 9 (id=2562): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = io_uring_setup(0x1210, &(0x7f0000000b80)={0x0, 0x0, 0x80, 0x3, 0x328}) timer_create(0x1, &(0x7f0000000b00)={0x0, 0x6, 0x4}, &(0x7f0000000b40)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000002080)={0x0}, 0x1) rt_sigaction(0xc, &(0x7f0000000280)={0x0, 0x18000002, &(0x7f0000000240)="660fe86d9dc4c24d03b37800000036dec03e410fa04783f207c4c2f924ea66410ff1c7f245e700f30fe6860080000045d97b08", {[0x9]}}, &(0x7f0000000380)={&(0x7f0000000300)="c4e179c5c300c4a109d1a8630000000f4b17f39026c02d567b64c70047ab65f600e66464f3420f1ef4c4817817b9000000006766430f50fb", 0x0, &(0x7f0000000340)="47ab0f5209450f620fc4033502e700c4c3d97855c3270fd8d0674e0f38f683bf00000064f0f757c766400f381df58fe868ee577f02"}, 0x8, &(0x7f00000003c0)) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) ioprio_set$pid(0x2, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000008c0)='./bus\x00', 0x6000, 0x1, &(0x7f0000000900)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000a00)={[{@inlinecrypt}, {@grpid}, {@noquota}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x1a0, 0xd0, 0xd0, 0x3f0, 0xd0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @loopback, [], [0x80], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x46}}}, {{@ipv6={@private0, @remote, [0x0, 0x0, 0xffffff00], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0xb842}}}, {{@ipv6={@loopback, @private2, [0xffffff00], [], 'syzkaller1\x00', 'veth0_to_batadv\x00', {0xff}}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000de63000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c9000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6a5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r6, 0x541b, &(0x7f0000000300)) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) 456.047471ms ago: executing program 5 (id=2563): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000007000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000340)='./file0\x00', r1}, 0x18) 411.713661ms ago: executing program 1 (id=2564): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703040000000000000000000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8002, 0x0) fcntl$setlease(r4, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev(r7, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 356.421121ms ago: executing program 5 (id=2565): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r6, &(0x7f0000001080)={0x860, 0x20, 0x3, 0x20, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x17, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc4a4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x12}, @jmp={0x5, 0x1, 0x1, 0x9, 0x5, 0x30}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe935, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000500)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xc, 0x7, 0x80000001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r2], &(0x7f00000006c0)=[{0x5, 0x5, 0xe, 0xa}, {0x5, 0x4, 0x9, 0x8}, {0x0, 0x5, 0x1, 0x6}], 0x10, 0x7fff, @void, @value}, 0x94) r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) close_range(r3, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000340)='./file0\x00', r8, 0x4000, r9}, 0x18) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a40)={0x14, r1, 0xe701ac47a3d23ecd}, 0x14}}, 0x800) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x453, 0x20, 0x70bd2c, 0x25dfdbfe, "3c944b485bbb69680f437ab692541ca4d16530", ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40408e5) socket$kcm(0x29, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 340.885661ms ago: executing program 9 (id=2566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) 227.570161ms ago: executing program 5 (id=2567): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_free_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 224.80076ms ago: executing program 4 (id=2568): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local={0xfe, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}}, 0x0) write$binfmt_register(r0, &(0x7f0000001680)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\proc/sys/fs/binfmt_misc/register\x00', 0x3a, '\x00', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, 0xd, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x4008080) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="c6", 0x1}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 189.128051ms ago: executing program 1 (id=2569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r0, &(0x7f0000000300)={&(0x7f00000006c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)=""/105, 0x69}, {&(0x7f0000000800)=""/243, 0xf3}, {&(0x7f0000000900)=""/128, 0xfffffffffffffe50}, {&(0x7f0000000000)=""/23, 0x17}], 0x4, &(0x7f0000001740)=""/4096, 0x1000}, 0x101) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000980)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095", @ANYBLOB="ae7f237cdd8dd67cce8890fca819964b517ce6b76fff5bbc807290e694d2bda5ccfb7d973bb495", @ANYRESOCT=r2, @ANYRESOCT=0x0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3], &(0x7f00000002c0)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00000000edbc4358ed72b3c4094209d60e00000000b7050000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 96.64333ms ago: executing program 5 (id=2570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x10000000007}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x179}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) 0s ago: executing program 9 (id=2571): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080100000100000090000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x17, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="f61034d0570500002d11036dd88dc26a5b2d3061ffff10006809b877a6329996745b880f9fb4343c9008d693a8291fd74fc1cac69e1bc7faf699496258ed0449e7e20b077ad3e1534abaef69766bcf12c2227b1a0da5f261653a33b4896afbdd145aed1b3f8ce570c64cd86f2140284cac22ac6c163e42641a73945ada6cdf1f878d3af919df6499b14772f55eeeae5e2e08edcbbb3968cf498a122af8a21889b43910ee977d92c2d80541"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x81, &(0x7f0000000740)=""/129, 0x41000, 0x47, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x4, 0xc, 0x7fff, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r0, 0x1], &(0x7f0000000b40), 0x10, 0x8b, @void, @value}, 0x94) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0x1, 0x0, 0x0, 0x42, 0x5c}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES64=r2, @ANYRES64=r3, @ANYRESHEX=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x200000000200}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_robust_list(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0x8, 0xffffffb3, 0x0, 0x4, 0xf03}) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3ff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 7 comm="syz.9.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 134.291641][ T9251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.314540][ T29] audit: type=1326 audit(13949715.863:18140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9237 comm="syz.9.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 134.327329][ T9251] FAULT_INJECTION: forcing a failure. [ 134.327329][ T9251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.349880][ T29] audit: type=1326 audit(13949715.863:18141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9237 comm="syz.9.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 134.349917][ T29] audit: type=1326 audit(13949715.863:18142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9237 comm="syz.9.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 134.362927][ T9251] CPU: 1 UID: 0 PID: 9251 Comm: syz.4.1872 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 134.362957][ T9251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 134.362971][ T9251] Call Trace: [ 134.362979][ T9251] [ 134.362989][ T9251] dump_stack_lvl+0xf2/0x150 [ 134.363088][ T9251] dump_stack+0x15/0x1a [ 134.363115][ T9251] should_fail_ex+0x24a/0x260 [ 134.363156][ T9251] should_fail+0xb/0x10 [ 134.363329][ T9251] should_fail_usercopy+0x1a/0x20 [ 134.363352][ T9251] _copy_to_user+0x20/0xa0 [ 134.363422][ T9251] simple_read_from_buffer+0xa0/0x110 [ 134.363452][ T9251] proc_fail_nth_read+0xf9/0x140 [ 134.363482][ T9251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.363646][ T9251] vfs_read+0x19b/0x6f0 [ 134.363670][ T9251] ? __rcu_read_unlock+0x4e/0x70 [ 134.363733][ T9251] ? __fget_files+0x17c/0x1c0 [ 134.363770][ T9251] ksys_read+0xe8/0x1b0 [ 134.363796][ T9251] __x64_sys_read+0x42/0x50 [ 134.363821][ T9251] x64_sys_call+0x2874/0x2dc0 [ 134.363904][ T9251] do_syscall_64+0xc9/0x1c0 [ 134.363934][ T9251] ? clear_bhb_loop+0x55/0xb0 [ 134.363966][ T9251] ? clear_bhb_loop+0x55/0xb0 [ 134.364048][ T9251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.364165][ T9251] RIP: 0033:0x7fe51111b73c [ 134.364270][ T9251] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 134.364293][ T9251] RSP: 002b:00007fe50f787030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.364315][ T9251] RAX: ffffffffffffffda RBX: 00007fe511335fa0 RCX: 00007fe51111b73c [ 134.364330][ T9251] RDX: 000000000000000f RSI: 00007fe50f7870a0 RDI: 0000000000000006 [ 134.364385][ T9251] RBP: 00007fe50f787090 R08: 0000000000000000 R09: 0000000000000000 [ 134.364399][ T9251] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 134.364415][ T9251] R13: 0000000000000000 R14: 00007fe511335fa0 R15: 00007fff1f00c158 [ 134.364438][ T9251] [ 134.451184][ T9257] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1874'. [ 134.453850][ T29] audit: type=1326 audit(13949715.863:18143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9237 comm="syz.9.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 134.460202][ T9257] 0ªX¹¦À: renamed from caif0 [ 134.463347][ T29] audit: type=1326 audit(13949715.863:18144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9237 comm="syz.9.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 134.531450][ T9263] loop8: detected capacity change from 0 to 512 [ 134.550312][ T29] audit: type=1326 audit(13949715.863:18145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9237 comm="syz.9.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 134.562994][ T9263] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 134.567707][ T9247] delete_channel: no stack [ 134.575349][ T9263] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1873: invalid indirect mapped block 2683928664 (level 1) [ 134.582938][ T9247] delete_channel: no stack [ 134.595122][ T5417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.668858][ T9263] EXT4-fs (loop8): 1 truncate cleaned up [ 134.669272][ T9263] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.752436][ T9257] 0ªX¹¦À: entered allmulticast mode [ 134.757903][ T9257] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 134.782447][ T9255] EXT4-fs: user quota file already specified [ 134.804187][ T9261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1874'. [ 134.813306][ T9261] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.834337][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.854024][ T9261] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.883647][ T9278] loop4: detected capacity change from 0 to 512 [ 134.912590][ T9278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.928379][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.097044][ T9297] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 135.126003][ T5417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.192981][ T9305] loop4: detected capacity change from 0 to 512 [ 135.223181][ T9305] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 135.290465][ T9308] loop5: detected capacity change from 0 to 512 [ 135.318063][ T9305] EXT4-fs (loop4): failed to open journal device unknown-block(4,137) -6 [ 135.321646][ T9308] EXT4-fs: inline encryption not supported [ 135.361228][ T9308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.413355][ T9308] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 135.512970][ T9293] loop8: detected capacity change from 0 to 2048 [ 135.557437][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.570705][ T9293] Alternate GPT is invalid, using primary GPT. [ 135.577149][ T9293] loop8: p2 p3 p7 [ 135.645185][ T9337] loop5: detected capacity change from 0 to 512 [ 135.659508][ T9337] EXT4-fs: Ignoring removed i_version option [ 135.665577][ T9337] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.673377][ T9337] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 135.702256][ T9337] EXT4-fs (loop5): 1 truncate cleaned up [ 135.713292][ T9337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.814389][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.862117][ T9354] FAULT_INJECTION: forcing a failure. [ 135.862117][ T9354] name failslab, interval 1, probability 0, space 0, times 0 [ 135.874926][ T9354] CPU: 1 UID: 0 PID: 9354 Comm: syz.8.1904 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 135.874957][ T9354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 135.874970][ T9354] Call Trace: [ 135.874977][ T9354] [ 135.874985][ T9354] dump_stack_lvl+0xf2/0x150 [ 135.875018][ T9354] dump_stack+0x15/0x1a [ 135.875045][ T9354] should_fail_ex+0x24a/0x260 [ 135.875153][ T9354] ? find_get_pmu_context+0x54/0x460 [ 135.875268][ T9354] should_failslab+0x8f/0xb0 [ 135.875297][ T9354] __kmalloc_cache_noprof+0x4e/0x320 [ 135.875339][ T9354] find_get_pmu_context+0x54/0x460 [ 135.875461][ T9354] __se_sys_perf_event_open+0xc65/0x2230 [ 135.875514][ T9354] ? putname+0xcf/0xf0 [ 135.875604][ T9354] __x64_sys_perf_event_open+0x67/0x80 [ 135.875641][ T9354] x64_sys_call+0x1deb/0x2dc0 [ 135.875678][ T9354] do_syscall_64+0xc9/0x1c0 [ 135.875725][ T9354] ? clear_bhb_loop+0x55/0xb0 [ 135.875759][ T9354] ? clear_bhb_loop+0x55/0xb0 [ 135.875793][ T9354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.875839][ T9354] RIP: 0033:0x7f8cf24bcd29 [ 135.875852][ T9354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.875874][ T9354] RSP: 002b:00007f8cf0b21038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 135.875897][ T9354] RAX: ffffffffffffffda RBX: 00007f8cf26d5fa0 RCX: 00007f8cf24bcd29 [ 135.875947][ T9354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 135.875958][ T9354] RBP: 00007f8cf0b21090 R08: 0000000000000003 R09: 0000000000000000 [ 135.875969][ T9354] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 135.875979][ T9354] R13: 0000000000000000 R14: 00007f8cf26d5fa0 R15: 00007ffe94e26f68 [ 135.876000][ T9354] [ 136.157099][ T9363] xt_hashlimit: size too large, truncated to 1048576 [ 136.180841][ T9368] loop8: detected capacity change from 0 to 512 [ 136.195260][ T9368] EXT4-fs: Ignoring removed bh option [ 136.201386][ T9368] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 136.213601][ T9368] EXT4-fs (loop8): 1 truncate cleaned up [ 136.219753][ T9368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.237796][ T9368] FAULT_INJECTION: forcing a failure. [ 136.237796][ T9368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.250889][ T9368] CPU: 1 UID: 0 PID: 9368 Comm: syz.8.1906 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 136.250913][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 136.250941][ T9368] Call Trace: [ 136.250948][ T9368] [ 136.250957][ T9368] dump_stack_lvl+0xf2/0x150 [ 136.250987][ T9368] dump_stack+0x15/0x1a [ 136.251060][ T9368] should_fail_ex+0x24a/0x260 [ 136.251099][ T9368] should_fail+0xb/0x10 [ 136.251131][ T9368] should_fail_usercopy+0x1a/0x20 [ 136.251148][ T9368] _copy_from_iter+0xd5/0xd00 [ 136.251178][ T9368] ? skb_set_owner_w+0x164/0x1b0 [ 136.251212][ T9368] ? __virt_addr_valid+0x1ed/0x250 [ 136.251237][ T9368] ? __check_object_size+0x364/0x520 [ 136.251285][ T9368] skb_copy_datagram_from_iter+0xb3/0x460 [ 136.251315][ T9368] ? skb_put+0xba/0x100 [ 136.251337][ T9368] tun_get_user+0x1132/0x25c0 [ 136.251448][ T9368] ? _parse_integer+0x27/0x30 [ 136.251481][ T9368] ? ref_tracker_alloc+0x1f5/0x2f0 [ 136.251524][ T9368] tun_chr_write_iter+0x188/0x240 [ 136.251561][ T9368] vfs_write+0x77b/0x920 [ 136.251658][ T9368] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 136.251691][ T9368] ksys_write+0xe8/0x1b0 [ 136.251762][ T9368] __x64_sys_write+0x42/0x50 [ 136.251782][ T9368] x64_sys_call+0x287e/0x2dc0 [ 136.251805][ T9368] do_syscall_64+0xc9/0x1c0 [ 136.251832][ T9368] ? clear_bhb_loop+0x55/0xb0 [ 136.251865][ T9368] ? clear_bhb_loop+0x55/0xb0 [ 136.251969][ T9368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.251997][ T9368] RIP: 0033:0x7f8cf24bcd29 [ 136.252011][ T9368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.252028][ T9368] RSP: 002b:00007f8cf0b21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.252045][ T9368] RAX: ffffffffffffffda RBX: 00007f8cf26d5fa0 RCX: 00007f8cf24bcd29 [ 136.252057][ T9368] RDX: 0000000000000ffe RSI: 00000000200000c0 RDI: 0000000000000004 [ 136.252068][ T9368] RBP: 00007f8cf0b21090 R08: 0000000000000000 R09: 0000000000000000 [ 136.252079][ T9368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.252170][ T9368] R13: 0000000000000000 R14: 00007f8cf26d5fa0 R15: 00007ffe94e26f68 [ 136.252187][ T9368] [ 136.582719][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.800275][ T9376] pim6reg1: entered promiscuous mode [ 136.805706][ T9376] pim6reg1: entered allmulticast mode [ 136.897853][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1919'. [ 136.943547][ T9408] loop1: detected capacity change from 0 to 512 [ 136.958313][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.971752][ T9408] EXT4-fs: inline encryption not supported [ 136.985337][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.026547][ T9408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.054389][ T9396] lo speed is unknown, defaulting to 1000 [ 137.080322][ T9425] xt_hashlimit: size too large, truncated to 1048576 [ 137.106651][ T9423] netem: incorrect gi model size [ 137.111641][ T9423] netem: change failed [ 137.136721][ T9408] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 137.288328][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.391253][ T9433] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1929'. [ 137.400366][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'. [ 137.411942][ T9431] loop1: detected capacity change from 0 to 512 [ 137.426018][ T9431] EXT4-fs: Ignoring removed oldalloc option [ 137.433490][ T9433] loop4: detected capacity change from 0 to 512 [ 137.441054][ T9431] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.452363][ T9433] EXT4-fs (loop4): too many log groups per flexible block group [ 137.460110][ T9433] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 137.467528][ T9433] EXT4-fs (loop4): mount failed [ 137.476689][ T9431] EXT4-fs (loop1): 1 truncate cleaned up [ 137.482734][ T9431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.505025][ T9440] sctp: [Deprecated]: syz.9.1930 (pid 9440) Use of int in max_burst socket option deprecated. [ 137.505025][ T9440] Use struct sctp_assoc_value instead [ 137.607472][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.717846][ T9453] loop5: detected capacity change from 0 to 512 [ 137.751965][ T9453] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 137.760845][ T9466] xt_hashlimit: size too large, truncated to 1048576 [ 137.804621][ T9453] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1937: invalid indirect mapped block 2683928664 (level 1) [ 137.869667][ T9453] EXT4-fs (loop5): 1 truncate cleaned up [ 137.898485][ T9453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.973669][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.018629][ T9481] netlink: 3 bytes leftover after parsing attributes in process `syz.9.1944'. [ 138.027945][ T9481] 0ªX¹¦À: renamed from caif0 [ 138.034420][ T9481] 0ªX¹¦À: entered allmulticast mode [ 138.039685][ T9481] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 138.059919][ T9486] loop5: detected capacity change from 0 to 512 [ 138.068695][ T9476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.090318][ T9476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.106272][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1948'. [ 138.157796][ T9486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.225733][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.248202][ T9508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.289205][ T9508] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1954'. [ 138.434005][ T9492] lo speed is unknown, defaulting to 1000 [ 138.523310][ T9517] loop5: detected capacity change from 0 to 512 [ 138.551067][ T9517] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 138.560933][ T9517] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1956: invalid indirect mapped block 2683928664 (level 1) [ 138.576646][ T9517] EXT4-fs (loop5): 1 truncate cleaned up [ 138.583917][ T9517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.621370][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.806674][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119558400: rx timeout, send abort [ 138.877988][ T9543] loop8: detected capacity change from 0 to 512 [ 138.884644][ T9543] EXT4-fs: Ignoring removed oldalloc option [ 138.894976][ T9543] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 138.907342][ T9543] EXT4-fs (loop8): 1 truncate cleaned up [ 138.913472][ T9543] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.943634][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.992257][ T9549] syz_tun: entered promiscuous mode [ 139.002578][ T9549] batadv_slave_0: entered promiscuous mode [ 139.009130][ T9549] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 139.019357][ T9549] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.045325][ T9549] hsr1: entered allmulticast mode [ 139.050476][ T9549] syz_tun: entered allmulticast mode [ 139.055877][ T9549] batadv_slave_0: entered allmulticast mode [ 139.207071][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 139.207085][ T29] audit: type=1400 audit(13949720.923:18831): avc: denied { getopt } for pid=9560 comm="syz.8.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.208695][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1972'. [ 139.314956][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119558400: abort rx timeout. Force session deactivation [ 139.319930][ T9566] xt_hashlimit: size too large, truncated to 1048576 [ 139.364741][ T29] audit: type=1326 audit(13949721.073:18832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.9.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 139.415026][ T29] audit: type=1326 audit(13949721.103:18833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.9.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 139.438808][ T29] audit: type=1326 audit(13949721.103:18834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.9.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 139.462262][ T29] audit: type=1326 audit(13949721.103:18835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.9.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 139.466410][ T9572] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 139.486102][ T29] audit: type=1326 audit(13949721.103:18836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.9.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 139.520064][ T29] audit: type=1326 audit(13949721.103:18837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.9.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 139.543672][ T29] audit: type=1326 audit(13949721.103:18838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.9.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 139.567205][ T29] audit: type=1326 audit(13949721.103:18839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.9.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 139.590732][ T29] audit: type=1326 audit(13949721.103:18840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.9.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a912cd29 code=0x7ffc0000 [ 139.724829][ T9584] loop1: detected capacity change from 0 to 512 [ 139.753301][ T9584] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 139.761627][ T9584] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1981: invalid indirect mapped block 2683928664 (level 1) [ 139.779271][ T9588] loop5: detected capacity change from 0 to 2048 [ 139.787178][ T9590] netlink: 272 bytes leftover after parsing attributes in process `syz.8.1980'. [ 139.800788][ T9588] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.817008][ T9584] EXT4-fs (loop1): 1 truncate cleaned up [ 139.832268][ T9588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.847326][ T9584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.877590][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.900890][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.160847][ T9608] loop1: detected capacity change from 0 to 512 [ 140.169221][ T9608] EXT4-fs: Ignoring removed oldalloc option [ 140.177327][ T9608] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.190900][ T9608] EXT4-fs (loop1): 1 truncate cleaned up [ 140.198281][ T9608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.294372][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.574911][ T9621] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 140.613805][ T9623] loop8: detected capacity change from 0 to 512 [ 140.623516][ T9623] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 140.632002][ T9623] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1994: invalid indirect mapped block 2683928664 (level 1) [ 140.647276][ T9623] EXT4-fs (loop8): 1 truncate cleaned up [ 140.653622][ T9623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.697208][ T9628] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 140.721819][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.930390][ T9646] FAULT_INJECTION: forcing a failure. [ 140.930390][ T9646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.943512][ T9646] CPU: 1 UID: 0 PID: 9646 Comm: syz.5.2001 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 140.943590][ T9646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 140.943605][ T9646] Call Trace: [ 140.943611][ T9646] [ 140.943618][ T9646] dump_stack_lvl+0xf2/0x150 [ 140.943645][ T9646] dump_stack+0x15/0x1a [ 140.943669][ T9646] should_fail_ex+0x24a/0x260 [ 140.943710][ T9646] should_fail+0xb/0x10 [ 140.943746][ T9646] should_fail_usercopy+0x1a/0x20 [ 140.943770][ T9646] strncpy_from_user+0x25/0x210 [ 140.943864][ T9646] strncpy_from_user_nofault+0x66/0xe0 [ 140.943920][ T9646] bpf_probe_read_compat_str+0xb3/0x130 [ 140.943961][ T9646] bpf_prog_632764f3a8ec7cf7+0x57/0x64 [ 140.943981][ T9646] bpf_trace_run3+0x10c/0x1d0 [ 140.944007][ T9646] ? __kfree_skb+0x102/0x150 [ 140.944112][ T9646] ? __kfree_skb+0x102/0x150 [ 140.944136][ T9646] __traceiter_kmem_cache_free+0x33/0x50 [ 140.944156][ T9646] ? __kfree_skb+0x102/0x150 [ 140.944183][ T9646] kmem_cache_free+0x237/0x2d0 [ 140.944238][ T9646] ? nlmon_xmit+0x51/0x60 [ 140.944270][ T9646] __kfree_skb+0x102/0x150 [ 140.944301][ T9646] consume_skb+0x49/0x160 [ 140.944327][ T9646] nlmon_xmit+0x51/0x60 [ 140.944351][ T9646] dev_hard_start_xmit+0x119/0x3f0 [ 140.944457][ T9646] __dev_queue_xmit+0x100a/0x2090 [ 140.944495][ T9646] ? __dev_queue_xmit+0x186/0x2090 [ 140.944562][ T9646] ? __skb_clone+0x2d0/0x2f0 [ 140.944589][ T9646] __netlink_deliver_tap+0x3be/0x4f0 [ 140.944627][ T9646] netlink_unicast+0x64a/0x670 [ 140.944670][ T9646] netlink_sendmsg+0x5cc/0x6e0 [ 140.944768][ T9646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.944809][ T9646] __sock_sendmsg+0x140/0x180 [ 140.944834][ T9646] sock_write_iter+0x15e/0x1a0 [ 140.944878][ T9646] do_iter_readv_writev+0x403/0x4b0 [ 140.944977][ T9646] vfs_writev+0x2d9/0x880 [ 140.945012][ T9646] ? get_pid_task+0x8e/0xc0 [ 140.945044][ T9646] ? proc_fail_nth_write+0x12a/0x150 [ 140.945130][ T9646] do_writev+0xf4/0x220 [ 140.945169][ T9646] __x64_sys_writev+0x45/0x50 [ 140.945235][ T9646] x64_sys_call+0x1fab/0x2dc0 [ 140.945267][ T9646] do_syscall_64+0xc9/0x1c0 [ 140.945294][ T9646] ? clear_bhb_loop+0x55/0xb0 [ 140.945455][ T9646] ? clear_bhb_loop+0x55/0xb0 [ 140.945495][ T9646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.945563][ T9646] RIP: 0033:0x7f9d9503cd29 [ 140.945581][ T9646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.945601][ T9646] RSP: 002b:00007f9d936a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 140.945619][ T9646] RAX: ffffffffffffffda RBX: 00007f9d95255fa0 RCX: 00007f9d9503cd29 [ 140.945633][ T9646] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 140.945644][ T9646] RBP: 00007f9d936a1090 R08: 0000000000000000 R09: 0000000000000000 [ 140.945659][ T9646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.945669][ T9646] R13: 0000000000000000 R14: 00007f9d95255fa0 R15: 00007fffb36b0308 [ 140.945688][ T9646] [ 141.240221][ T9646] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2001'. [ 141.254725][ T9646] 0ªX¹¦À: renamed from caif0 [ 141.261140][ T9646] 0ªX¹¦À: entered allmulticast mode [ 141.266406][ T9646] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 141.386289][ T9655] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 141.513783][ T9657] loop5: detected capacity change from 0 to 512 [ 141.536131][ T9643] loop8: detected capacity change from 0 to 2048 [ 141.543716][ T9657] EXT4-fs: inline encryption not supported [ 141.553009][ T9662] loop1: detected capacity change from 0 to 512 [ 141.560612][ T9662] EXT4-fs: inline encryption not supported [ 141.577998][ T9657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.598245][ T9662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.619625][ T9643] Alternate GPT is invalid, using primary GPT. [ 141.620210][ T9657] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 141.626017][ T9643] loop8: p2 p3 p7 [ 141.642296][ T9662] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 141.672235][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.728225][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.752260][ T9674] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 141.800675][ T9684] FAULT_INJECTION: forcing a failure. [ 141.800675][ T9684] name failslab, interval 1, probability 0, space 0, times 0 [ 141.813488][ T9684] CPU: 1 UID: 0 PID: 9684 Comm: syz.5.2014 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 141.813516][ T9684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 141.813531][ T9684] Call Trace: [ 141.813538][ T9684] [ 141.813546][ T9684] dump_stack_lvl+0xf2/0x150 [ 141.813580][ T9684] dump_stack+0x15/0x1a [ 141.813677][ T9684] should_fail_ex+0x24a/0x260 [ 141.813713][ T9684] should_failslab+0x8f/0xb0 [ 141.813771][ T9684] __kmalloc_noprof+0xab/0x3f0 [ 141.813811][ T9684] ? security_perf_event_alloc+0x45/0x120 [ 141.813837][ T9684] ? perf_tp_event_init+0xad/0xd0 [ 141.813866][ T9684] security_perf_event_alloc+0x45/0x120 [ 141.813960][ T9684] perf_event_alloc+0x10eb/0x12e0 [ 141.813994][ T9684] __se_sys_perf_event_open+0x7f2/0x2230 [ 141.814036][ T9684] ? vfs_write+0x644/0x920 [ 141.814060][ T9684] ? putname+0xcf/0xf0 [ 141.814247][ T9684] __x64_sys_perf_event_open+0x67/0x80 [ 141.814287][ T9684] x64_sys_call+0x1deb/0x2dc0 [ 141.814359][ T9684] do_syscall_64+0xc9/0x1c0 [ 141.814384][ T9684] ? clear_bhb_loop+0x55/0xb0 [ 141.814463][ T9684] ? clear_bhb_loop+0x55/0xb0 [ 141.814492][ T9684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.814516][ T9684] RIP: 0033:0x7f9d9503cd29 [ 141.814530][ T9684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.814568][ T9684] RSP: 002b:00007f9d93680038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 141.814590][ T9684] RAX: ffffffffffffffda RBX: 00007f9d95256080 RCX: 00007f9d9503cd29 [ 141.814605][ T9684] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000200 [ 141.814694][ T9684] RBP: 00007f9d93680090 R08: 0000000000000008 R09: 0000000000000000 [ 141.814705][ T9684] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 141.814717][ T9684] R13: 0000000000000000 R14: 00007f9d95256080 R15: 00007fffb36b0308 [ 141.814740][ T9684] [ 142.096856][ T9689] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 142.213599][ T9699] loop1: detected capacity change from 0 to 512 [ 142.246595][ T9699] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 142.281970][ T9704] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 142.285072][ T9699] EXT4-fs (loop1): 1 truncate cleaned up [ 142.311159][ T9699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.345742][ T9709] loop5: detected capacity change from 0 to 512 [ 142.366764][ T9698] Process accounting resumed [ 142.371701][ T9709] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 142.388734][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.498947][ T9721] loop1: detected capacity change from 0 to 512 [ 142.498962][ T9724] loop5: detected capacity change from 0 to 512 [ 142.499203][ T9724] EXT4-fs: Ignoring removed oldalloc option [ 142.526741][ T9721] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 142.547506][ T9724] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.577952][ T9724] EXT4-fs (loop5): 1 truncate cleaned up [ 142.588136][ T9724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.608296][ T9732] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 142.673882][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.698318][ T9735] loop8: detected capacity change from 0 to 2048 [ 142.721862][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2036'. [ 142.824722][ T9735] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.880390][ T9735] delete_channel: no stack [ 142.903313][ T9735] delete_channel: no stack [ 142.972294][ T9759] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 142.980618][ T9759] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 143.218522][ T9772] loop5: detected capacity change from 0 to 512 [ 143.260099][ T9772] EXT4-fs: Ignoring removed oldalloc option [ 143.287035][ T9772] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 143.328397][ T9772] EXT4-fs (loop5): 1 truncate cleaned up [ 143.343636][ T9772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.377001][ T9780] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 143.402651][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.516654][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.526833][ T9768] loop1: detected capacity change from 0 to 2048 [ 143.548027][ T9785] FAULT_INJECTION: forcing a failure. [ 143.548027][ T9785] name failslab, interval 1, probability 0, space 0, times 0 [ 143.560856][ T9785] CPU: 0 UID: 0 PID: 9785 Comm: syz.5.2052 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 143.560888][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 143.560982][ T9785] Call Trace: [ 143.560988][ T9785] [ 143.560994][ T9785] dump_stack_lvl+0xf2/0x150 [ 143.561019][ T9785] dump_stack+0x15/0x1a [ 143.561038][ T9785] should_fail_ex+0x24a/0x260 [ 143.561084][ T9785] should_failslab+0x8f/0xb0 [ 143.561115][ T9785] __kmalloc_node_noprof+0xad/0x410 [ 143.561156][ T9785] ? vmemdup_user+0x42/0x1b0 [ 143.561181][ T9785] vmemdup_user+0x42/0x1b0 [ 143.561219][ T9785] path_setxattrat+0x1c9/0x310 [ 143.561302][ T9785] __x64_sys_fsetxattr+0x6d/0x80 [ 143.561337][ T9785] x64_sys_call+0x29d2/0x2dc0 [ 143.561367][ T9785] do_syscall_64+0xc9/0x1c0 [ 143.561450][ T9785] ? clear_bhb_loop+0x55/0xb0 [ 143.561483][ T9785] ? clear_bhb_loop+0x55/0xb0 [ 143.561539][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.561563][ T9785] RIP: 0033:0x7f9d9503cd29 [ 143.561576][ T9785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.561598][ T9785] RSP: 002b:00007f9d936a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 143.561620][ T9785] RAX: ffffffffffffffda RBX: 00007f9d95255fa0 RCX: 00007f9d9503cd29 [ 143.561702][ T9785] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000006 [ 143.561717][ T9785] RBP: 00007f9d936a1090 R08: 0000000000000000 R09: 0000000000000000 [ 143.561729][ T9785] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 143.561740][ T9785] R13: 0000000000000000 R14: 00007f9d95255fa0 R15: 00007fffb36b0308 [ 143.561757][ T9785] [ 143.747712][ T9777] Alternate GPT is invalid, using primary GPT. [ 143.754163][ T9777] loop1: p2 p3 p7 [ 143.829839][ T9768] Alternate GPT is invalid, using primary GPT. [ 143.831054][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2057'. [ 143.836349][ T9768] loop1: p2 p3 p7 [ 144.052801][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2066'. [ 144.061943][ T9825] netlink: 'syz.8.2066': attribute type 1 has an invalid length. [ 144.069728][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2066'. [ 144.097117][ T9821] delete_channel: no stack [ 144.106507][ T9827] loop5: detected capacity change from 0 to 1024 [ 144.118938][ T9821] delete_channel: no stack [ 144.123773][ T9827] ext4: Bad value for 'max_dir_size_kb' [ 144.171740][ T9831] loop1: detected capacity change from 0 to 512 [ 144.199143][ T9837] FAULT_INJECTION: forcing a failure. [ 144.199143][ T9837] name failslab, interval 1, probability 0, space 0, times 0 [ 144.203090][ T9831] EXT4-fs: Ignoring removed oldalloc option [ 144.211891][ T9837] CPU: 1 UID: 0 PID: 9837 Comm: syz.8.2070 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 144.211923][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 144.211939][ T9837] Call Trace: [ 144.211946][ T9837] [ 144.211956][ T9837] dump_stack_lvl+0xf2/0x150 [ 144.211992][ T9837] dump_stack+0x15/0x1a [ 144.212018][ T9837] should_fail_ex+0x24a/0x260 [ 144.212090][ T9837] should_failslab+0x8f/0xb0 [ 144.212165][ T9837] kmem_cache_alloc_noprof+0x52/0x320 [ 144.212205][ T9837] ? getname_flags+0x81/0x3b0 [ 144.212242][ T9837] getname_flags+0x81/0x3b0 [ 144.212323][ T9837] user_path_at+0x26/0x120 [ 144.212365][ T9837] __se_sys_mount+0x24b/0x2d0 [ 144.212437][ T9837] ? fput+0x1c4/0x200 [ 144.212477][ T9837] __x64_sys_mount+0x67/0x80 [ 144.212509][ T9837] x64_sys_call+0x2c84/0x2dc0 [ 144.212604][ T9837] do_syscall_64+0xc9/0x1c0 [ 144.212633][ T9837] ? clear_bhb_loop+0x55/0xb0 [ 144.212703][ T9837] ? clear_bhb_loop+0x55/0xb0 [ 144.212736][ T9837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.212768][ T9837] RIP: 0033:0x7f8cf24bcd29 [ 144.212787][ T9837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.212821][ T9837] RSP: 002b:00007f8cf0b21038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.212844][ T9837] RAX: ffffffffffffffda RBX: 00007f8cf26d5fa0 RCX: 00007f8cf24bcd29 [ 144.212859][ T9837] RDX: 0000000020000200 RSI: 0000000020000180 RDI: 0000000020000000 [ 144.212873][ T9837] RBP: 00007f8cf0b21090 R08: 0000000020000b80 R09: 0000000000000000 [ 144.212888][ T9837] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 144.212901][ T9837] R13: 0000000000000000 R14: 00007f8cf26d5fa0 R15: 00007ffe94e26f68 [ 144.212924][ T9837] [ 144.405851][ T9831] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.431796][ T9831] EXT4-fs (loop1): 1 truncate cleaned up [ 144.514158][ T9846] FAULT_INJECTION: forcing a failure. [ 144.514158][ T9846] name failslab, interval 1, probability 0, space 0, times 0 [ 144.527043][ T9846] CPU: 1 UID: 0 PID: 9846 Comm: syz.8.2073 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 144.527068][ T9846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 144.527144][ T9846] Call Trace: [ 144.527152][ T9846] [ 144.527161][ T9846] dump_stack_lvl+0xf2/0x150 [ 144.527190][ T9846] dump_stack+0x15/0x1a [ 144.527209][ T9846] should_fail_ex+0x24a/0x260 [ 144.527298][ T9846] should_failslab+0x8f/0xb0 [ 144.527323][ T9846] kmem_cache_alloc_noprof+0x52/0x320 [ 144.527419][ T9846] ? security_file_alloc+0x32/0x100 [ 144.527481][ T9846] security_file_alloc+0x32/0x100 [ 144.527523][ T9846] init_file+0x5b/0x1a0 [ 144.527555][ T9846] alloc_empty_file+0xea/0x200 [ 144.527584][ T9846] alloc_file_pseudo+0xc3/0x140 [ 144.527705][ T9846] anon_inode_getfile+0xa3/0x120 [ 144.527736][ T9846] do_eventfd+0x10a/0x1b0 [ 144.527757][ T9846] __x64_sys_eventfd+0x20/0x30 [ 144.527781][ T9846] x64_sys_call+0x2626/0x2dc0 [ 144.527816][ T9846] do_syscall_64+0xc9/0x1c0 [ 144.527842][ T9846] ? clear_bhb_loop+0x55/0xb0 [ 144.527947][ T9846] ? clear_bhb_loop+0x55/0xb0 [ 144.528061][ T9846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.528093][ T9846] RIP: 0033:0x7f8cf24bcd29 [ 144.528107][ T9846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.528129][ T9846] RSP: 002b:00007f8cf0b21038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 144.528164][ T9846] RAX: ffffffffffffffda RBX: 00007f8cf26d5fa0 RCX: 00007f8cf24bcd29 [ 144.528179][ T9846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 144.528193][ T9846] RBP: 00007f8cf0b21090 R08: 0000000000000000 R09: 0000000000000000 [ 144.528207][ T9846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.528220][ T9846] R13: 0000000000000000 R14: 00007f8cf26d5fa0 R15: 00007ffe94e26f68 [ 144.528244][ T9846] [ 144.766662][ T9850] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2076'. [ 144.785736][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2076'. [ 144.834619][ T29] kauditd_printk_skb: 942 callbacks suppressed [ 144.834636][ T29] audit: type=1326 audit(13949726.543:19783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9503cd29 code=0x7ffc0000 [ 144.864354][ T29] audit: type=1326 audit(13949726.543:19784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9503cd29 code=0x7ffc0000 [ 144.949459][ T29] audit: type=1326 audit(13949726.543:19785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f9d9503cd29 code=0x7ffc0000 [ 144.972963][ T29] audit: type=1326 audit(13949726.543:19786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9503cd29 code=0x7ffc0000 [ 144.996407][ T29] audit: type=1326 audit(13949726.543:19787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9503cd29 code=0x7ffc0000 [ 145.033464][ T9859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2077'. [ 145.042513][ T9859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2077'. [ 145.078861][ T9859] syz_tun: entered promiscuous mode [ 145.089313][ T9859] batadv_slave_1: entered promiscuous mode [ 145.122927][ T9859] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 145.212871][ T9859] Cannot create hsr debugfs directory [ 145.246483][ T29] audit: type=1326 audit(13949726.953:19788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35532cd29 code=0x7ffc0000 [ 145.342911][ T29] audit: type=1326 audit(13949726.953:19789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35532cd29 code=0x7ffc0000 [ 145.366303][ T29] audit: type=1326 audit(13949726.983:19790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff35532cd29 code=0x7ffc0000 [ 145.389707][ T29] audit: type=1326 audit(13949726.993:19791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35532cd29 code=0x7ffc0000 [ 145.413127][ T29] audit: type=1326 audit(13949726.993:19792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35532cd29 code=0x7ffc0000 [ 145.538746][ T9884] GUP no longer grows the stack in syz.8.2087 (9884): 20004000-20008000 (20002000) [ 145.548259][ T9884] CPU: 1 UID: 0 PID: 9884 Comm: syz.8.2087 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 145.548288][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 145.548299][ T9884] Call Trace: [ 145.548378][ T9884] [ 145.548387][ T9884] dump_stack_lvl+0xf2/0x150 [ 145.548417][ T9884] dump_stack+0x15/0x1a [ 145.548444][ T9884] __get_user_pages+0x1de5/0x2350 [ 145.548512][ T9884] ? __rcu_read_unlock+0x4e/0x70 [ 145.548539][ T9884] get_user_pages_remote+0x1df/0x790 [ 145.548567][ T9884] __access_remote_vm+0x15b/0x580 [ 145.548675][ T9884] access_remote_vm+0x34/0x50 [ 145.548828][ T9884] proc_pid_cmdline_read+0x3e6/0x660 [ 145.548858][ T9884] vfs_readv+0x3e2/0x660 [ 145.548896][ T9884] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 145.548934][ T9884] __x64_sys_preadv+0xf4/0x1c0 [ 145.549031][ T9884] x64_sys_call+0x2680/0x2dc0 [ 145.549065][ T9884] do_syscall_64+0xc9/0x1c0 [ 145.549098][ T9884] ? clear_bhb_loop+0x55/0xb0 [ 145.549133][ T9884] ? clear_bhb_loop+0x55/0xb0 [ 145.549211][ T9884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.549242][ T9884] RIP: 0033:0x7f8cf24bcd29 [ 145.549290][ T9884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.549312][ T9884] RSP: 002b:00007f8cf0b21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 145.549336][ T9884] RAX: ffffffffffffffda RBX: 00007f8cf26d5fa0 RCX: 00007f8cf24bcd29 [ 145.549352][ T9884] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000007 [ 145.549365][ T9884] RBP: 00007f8cf253e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 145.549380][ T9884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.549449][ T9884] R13: 0000000000000000 R14: 00007f8cf26d5fa0 R15: 00007ffe94e26f68 [ 145.549466][ T9884] [ 145.807882][ T9884] Cannot find add_set index 0 as target [ 145.990615][ T9907] loop8: detected capacity change from 0 to 2048 [ 146.072600][ T9907] delete_channel: no stack [ 146.093245][ T9907] delete_channel: no stack [ 146.098563][ T9915] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 146.189947][ T9920] loop4: detected capacity change from 0 to 2048 [ 146.237660][ T9927] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.252818][ T9920] EXT4-fs: inline encryption not supported [ 146.337623][ T9920] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 146.353515][ T9920] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 26 with error 28 [ 146.365932][ T9920] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.365932][ T9920] [ 146.375700][ T9920] EXT4-fs (loop4): Total free blocks count 0 [ 146.381753][ T9920] EXT4-fs (loop4): Free/Dirty block details [ 146.387766][ T9920] EXT4-fs (loop4): free_blocks=2415919104 [ 146.393737][ T9920] EXT4-fs (loop4): dirty_blocks=32 [ 146.398934][ T9920] EXT4-fs (loop4): Block reservation details [ 146.404966][ T9920] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 146.599623][ T9954] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2109'. [ 146.612523][ T9952] loop5: detected capacity change from 0 to 1024 [ 146.642978][ T9952] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 146.673337][ T9952] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 146.684463][ T9952] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 146.733227][ T9952] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 146.785164][ T9952] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #3: comm syz.5.2108: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 146.824941][ T9952] EXT4-fs (loop5): no journal found [ 146.830241][ T9952] EXT4-fs (loop5): can't get journal size [ 146.849812][ T9952] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #3: comm syz.5.2108: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 146.875068][ T9931] pim6reg1: entered promiscuous mode [ 146.881458][ T9931] pim6reg1: entered allmulticast mode [ 146.895377][ T9952] EXT4-fs (loop5): failed to initialize system zone (-117) [ 146.912209][ T9952] EXT4-fs (loop5): mount failed [ 147.024304][ T9970] loop4: detected capacity change from 0 to 512 [ 147.054500][ T9970] EXT4-fs: inline encryption not supported [ 147.088719][ T9985] loop8: detected capacity change from 0 to 512 [ 147.094139][ T9970] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 147.126994][ T9985] EXT4-fs: Ignoring removed oldalloc option [ 147.143423][ T9985] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 147.174314][ T9985] EXT4-fs (loop8): 1 truncate cleaned up [ 147.181524][ T9992] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2121'. [ 147.233932][ T9998] SELinux: security_context_str_to_sid (>) failed with errno=-22 [ 147.341538][T10009] loop8: detected capacity change from 0 to 764 [ 147.360533][T10009] iso9660: Unknown parameter '' [ 147.391909][T10009] loop8: detected capacity change from 0 to 1024 [ 147.415610][T10009] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.498372][T10009] EXT4-fs error (device loop8): ext4_lookup:1813: inode #15: comm syz.8.2129: iget: bad extended attribute block 8388352 [ 147.533624][T10009] EXT4-fs (loop8): Remounting filesystem read-only [ 147.939543][T10029] loop4: detected capacity change from 0 to 164 [ 147.944250][T10003] loop5: detected capacity change from 0 to 2048 [ 147.978239][T10029] Unable to read rock-ridge attributes [ 148.023818][T10003] Alternate GPT is invalid, using primary GPT. [ 148.030244][T10003] loop5: p2 p3 p7 [ 148.150777][T10041] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2137'. [ 148.271807][T10043] FAULT_INJECTION: forcing a failure. [ 148.271807][T10043] name failslab, interval 1, probability 0, space 0, times 0 [ 148.284516][T10043] CPU: 0 UID: 0 PID: 10043 Comm: syz.1.2138 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 148.284544][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 148.284558][T10043] Call Trace: [ 148.284565][T10043] [ 148.284572][T10043] dump_stack_lvl+0xf2/0x150 [ 148.284604][T10043] dump_stack+0x15/0x1a [ 148.284627][T10043] should_fail_ex+0x24a/0x260 [ 148.284666][T10043] should_failslab+0x8f/0xb0 [ 148.284694][T10043] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 148.284730][T10043] ? shmem_alloc_inode+0x34/0x50 [ 148.284767][T10043] shmem_alloc_inode+0x34/0x50 [ 148.284802][T10043] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 148.284844][T10043] alloc_inode+0x3c/0x160 [ 148.284871][T10043] new_inode+0x1e/0x100 [ 148.284898][T10043] shmem_get_inode+0x24e/0x730 [ 148.284932][T10043] __shmem_file_setup+0x127/0x1f0 [ 148.284961][T10043] shmem_zero_setup+0x63/0xe0 [ 148.284990][T10043] mmap_region+0xe78/0x1620 [ 148.285040][T10043] do_mmap+0x98a/0xc30 [ 148.285067][T10043] vm_mmap_pgoff+0x16d/0x2d0 [ 148.285096][T10043] ksys_mmap_pgoff+0xd0/0x330 [ 148.285120][T10043] ? fpregs_assert_state_consistent+0x83/0xa0 [ 148.285156][T10043] x64_sys_call+0x1940/0x2dc0 [ 148.285182][T10043] do_syscall_64+0xc9/0x1c0 [ 148.285210][T10043] ? clear_bhb_loop+0x55/0xb0 [ 148.285241][T10043] ? clear_bhb_loop+0x55/0xb0 [ 148.285273][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.285304][T10043] RIP: 0033:0x7ff35532cd29 [ 148.285321][T10043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.285342][T10043] RSP: 002b:00007ff353991038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 148.285363][T10043] RAX: ffffffffffffffda RBX: 00007ff355545fa0 RCX: 00007ff35532cd29 [ 148.285377][T10043] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 148.285391][T10043] RBP: 00007ff353991090 R08: ffffffffffffffff R09: 0000000000000000 [ 148.285405][T10043] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 148.285419][T10043] R13: 0000000000000000 R14: 00007ff355545fa0 R15: 00007ffe39081998 [ 148.285440][T10043] [ 148.507755][T10047] loop5: detected capacity change from 0 to 512 [ 148.532502][T10047] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 148.566656][T10047] EXT4-fs (loop5): 1 truncate cleaned up [ 148.580745][T10047] tmpfs: Unsupported parameter 'huge' [ 148.589072][T10025] netlink: 'syz.4.2132': attribute type 3 has an invalid length. [ 148.767689][T10063] loop8: detected capacity change from 0 to 512 [ 148.777544][T10063] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 148.823830][T10063] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2148: invalid indirect mapped block 2683928664 (level 1) [ 148.840978][T10069] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2150'. [ 148.907276][T10063] EXT4-fs (loop8): 1 truncate cleaned up [ 148.980570][T10075] loop1: detected capacity change from 0 to 512 [ 149.022170][T10075] EXT4-fs (loop1): 1 orphan inode deleted [ 149.049915][ T50] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 149.062436][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2154'. [ 149.087468][T10075] Process accounting resumed [ 149.095609][T10082] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 149.167877][T10085] Process accounting resumed [ 149.252052][ T50] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 149.342809][T10073] pim6reg1: entered promiscuous mode [ 149.348252][T10073] pim6reg1: entered allmulticast mode [ 149.572228][T10110] FAULT_INJECTION: forcing a failure. [ 149.572228][T10110] name failslab, interval 1, probability 0, space 0, times 0 [ 149.584997][T10110] CPU: 1 UID: 0 PID: 10110 Comm: syz.8.2162 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 149.585023][T10110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 149.585035][T10110] Call Trace: [ 149.585059][T10110] [ 149.585067][T10110] dump_stack_lvl+0xf2/0x150 [ 149.585099][T10110] dump_stack+0x15/0x1a [ 149.585119][T10110] should_fail_ex+0x24a/0x260 [ 149.585149][T10110] ? audit_log_d_path+0x96/0x250 [ 149.585181][T10110] should_failslab+0x8f/0xb0 [ 149.585293][T10110] __kmalloc_cache_noprof+0x4e/0x320 [ 149.585334][T10110] audit_log_d_path+0x96/0x250 [ 149.585371][T10110] ? __rcu_read_unlock+0x4e/0x70 [ 149.585446][T10110] audit_log_d_path_exe+0x42/0x70 [ 149.585476][T10110] audit_log_task+0x192/0x1c0 [ 149.585511][T10110] audit_seccomp+0x68/0x130 [ 149.585597][T10110] __seccomp_filter+0x6fa/0x1180 [ 149.585629][T10110] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 149.585653][T10110] ? vfs_write+0x644/0x920 [ 149.585676][T10110] __secure_computing+0x9f/0x1c0 [ 149.585701][T10110] syscall_trace_enter+0xd1/0x1f0 [ 149.585792][T10110] ? fpregs_assert_state_consistent+0x83/0xa0 [ 149.585877][T10110] do_syscall_64+0xaa/0x1c0 [ 149.585908][T10110] ? clear_bhb_loop+0x55/0xb0 [ 149.585969][T10110] ? clear_bhb_loop+0x55/0xb0 [ 149.586052][T10110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.586085][T10110] RIP: 0033:0x7f8cf24bb73c [ 149.586103][T10110] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 149.586126][T10110] RSP: 002b:00007f8cf0b21030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.586149][T10110] RAX: ffffffffffffffda RBX: 00007f8cf26d5fa0 RCX: 00007f8cf24bb73c [ 149.586164][T10110] RDX: 000000000000000f RSI: 00007f8cf0b210a0 RDI: 0000000000000006 [ 149.586249][T10110] RBP: 00007f8cf0b21090 R08: 0000000000000000 R09: 0000000000000000 [ 149.586263][T10110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.586277][T10110] R13: 0000000000000000 R14: 00007f8cf26d5fa0 R15: 00007ffe94e26f68 [ 149.586298][T10110] [ 149.816950][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2164'. [ 149.825899][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2164'. [ 149.834770][T10115] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2164'. [ 149.843688][ T29] kauditd_printk_skb: 836 callbacks suppressed [ 149.843703][ T29] audit: type=1326 audit(13949731.513:20627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d95033ce7 code=0x7ffc0000 [ 149.873427][ T29] audit: type=1326 audit(13949731.523:20628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d94fd8f29 code=0x7ffc0000 [ 149.896822][ T29] audit: type=1326 audit(13949731.523:20629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9503cd29 code=0x7ffc0000 [ 149.920272][ T29] audit: type=1326 audit(13949731.523:20630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d95033ce7 code=0x7ffc0000 [ 149.943952][ T29] audit: type=1326 audit(13949731.523:20631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d94fd8f29 code=0x7ffc0000 [ 149.967353][ T29] audit: type=1326 audit(13949731.523:20632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9d9503cd29 code=0x7ffc0000 [ 149.990908][ T29] audit: type=1326 audit(13949731.523:20633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d95033ce7 code=0x7ffc0000 [ 149.991486][T10116] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 150.014482][ T29] audit: type=1326 audit(13949731.523:20634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d94fd8f29 code=0x7ffc0000 [ 150.014521][ T29] audit: type=1326 audit(13949731.523:20635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9503cd29 code=0x7ffc0000 [ 150.014551][ T29] audit: type=1326 audit(13949731.523:20636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d95033ce7 code=0x7ffc0000 [ 150.024485][T10116] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 150.135841][T10117] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 150.145985][T10117] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 150.231206][T10125] loop5: detected capacity change from 0 to 512 [ 150.266543][T10125] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.2168: casefold flag without casefold feature [ 150.300770][T10125] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2168: couldn't read orphan inode 15 (err -117) [ 150.364427][T10133] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2171'. [ 150.414973][T10133] 0ªX¹¦À: renamed from caif0 [ 150.461075][T10133] 0ªX¹¦À: entered allmulticast mode [ 150.466440][T10133] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 150.497391][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2175'. [ 150.628511][T10161] loop8: detected capacity change from 0 to 1024 [ 150.649122][T10161] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.876994][T10174] xt_hashlimit: size too large, truncated to 1048576 [ 150.886879][T10176] FAULT_INJECTION: forcing a failure. [ 150.886879][T10176] name failslab, interval 1, probability 0, space 0, times 0 [ 150.899569][T10176] CPU: 0 UID: 0 PID: 10176 Comm: syz.4.2186 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 150.899627][T10176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 150.899640][T10176] Call Trace: [ 150.899646][T10176] [ 150.899652][T10176] dump_stack_lvl+0xf2/0x150 [ 150.899680][T10176] dump_stack+0x15/0x1a [ 150.899701][T10176] should_fail_ex+0x24a/0x260 [ 150.899733][T10176] should_failslab+0x8f/0xb0 [ 150.899834][T10176] __kmalloc_cache_node_noprof+0x56/0x320 [ 150.899895][T10176] ? __get_vm_area_node+0xfb/0x1c0 [ 150.899918][T10176] __get_vm_area_node+0xfb/0x1c0 [ 150.899941][T10176] __vmalloc_node_range_noprof+0x280/0xe70 [ 150.900038][T10176] ? bpf_check+0xdc/0xc060 [ 150.900057][T10176] ? __alloc_frozen_pages_noprof+0x194/0x340 [ 150.900085][T10176] ? ___kmalloc_large_node+0xba/0x120 [ 150.900174][T10176] ? __kmalloc_node_noprof+0x2f3/0x410 [ 150.900259][T10176] ? __kvmalloc_node_noprof+0x72/0x170 [ 150.900325][T10176] ? bpf_check+0xdc/0xc060 [ 150.900344][T10176] vzalloc_noprof+0x5e/0x70 [ 150.900366][T10176] ? bpf_check+0xdc/0xc060 [ 150.900385][T10176] bpf_check+0xdc/0xc060 [ 150.900404][T10176] ? __rcu_read_unlock+0x4e/0x70 [ 150.900425][T10176] ? obj_cgroup_charge_pages+0x13d/0x1a0 [ 150.900522][T10176] ? __rcu_read_unlock+0x4e/0x70 [ 150.900544][T10176] ? __memcg_kmem_charge_page+0xd2/0x170 [ 150.900578][T10176] ? __alloc_frozen_pages_noprof+0x1bc/0x340 [ 150.900636][T10176] ? alloc_pages_bulk_noprof+0x3a0/0x570 [ 150.900673][T10176] ? __vmap_pages_range_noflush+0x940/0x960 [ 150.900694][T10176] ? _find_next_zero_bit+0x29/0x90 [ 150.900723][T10176] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 150.900758][T10176] ? cgroup_rstat_updated+0x9f/0x570 [ 150.900814][T10176] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 150.900851][T10176] ? pcpu_chunk_relocate+0x183/0x280 [ 150.900939][T10176] ? __mod_memcg_state+0x122/0x280 [ 150.900987][T10176] ? __rcu_read_unlock+0x4e/0x70 [ 150.901007][T10176] ? pcpu_memcg_post_alloc_hook+0x158/0x1c0 [ 150.901044][T10176] ? bpf_prog_alloc+0x59/0x150 [ 150.901068][T10176] ? should_fail_ex+0xd7/0x260 [ 150.901165][T10176] ? selinux_bpf_prog_load+0x35/0xe0 [ 150.901186][T10176] ? should_failslab+0x8f/0xb0 [ 150.901211][T10176] ? __kmalloc_cache_noprof+0x186/0x320 [ 150.901262][T10176] ? selinux_bpf_prog_load+0xbb/0xe0 [ 150.901290][T10176] bpf_prog_load+0xed3/0x1070 [ 150.901362][T10176] ? __rcu_read_unlock+0x4e/0x70 [ 150.901392][T10176] __sys_bpf+0x463/0x7a0 [ 150.901453][T10176] __x64_sys_bpf+0x43/0x50 [ 150.901475][T10176] x64_sys_call+0x2914/0x2dc0 [ 150.901501][T10176] do_syscall_64+0xc9/0x1c0 [ 150.901525][T10176] ? clear_bhb_loop+0x55/0xb0 [ 150.901612][T10176] ? clear_bhb_loop+0x55/0xb0 [ 150.901678][T10176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.901705][T10176] RIP: 0033:0x7fe51111cd29 [ 150.901719][T10176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.901737][T10176] RSP: 002b:00007fe50f787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.901809][T10176] RAX: ffffffffffffffda RBX: 00007fe511335fa0 RCX: 00007fe51111cd29 [ 150.901821][T10176] RDX: 0000000000000090 RSI: 0000000020000880 RDI: 0000000000000005 [ 150.901832][T10176] RBP: 00007fe50f787090 R08: 0000000000000000 R09: 0000000000000000 [ 150.901843][T10176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.901855][T10176] R13: 0000000000000000 R14: 00007fe511335fa0 R15: 00007fff1f00c158 [ 150.901872][T10176] [ 150.901912][T10176] syz.4.2186: vmalloc error: size 576, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 151.260472][T10176] CPU: 0 UID: 0 PID: 10176 Comm: syz.4.2186 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 151.260505][T10176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 151.260565][T10176] Call Trace: [ 151.260571][T10176] [ 151.260579][T10176] dump_stack_lvl+0xf2/0x150 [ 151.260646][T10176] dump_stack+0x15/0x1a [ 151.260669][T10176] warn_alloc+0x145/0x1b0 [ 151.260696][T10176] ? __get_vm_area_node+0xfb/0x1c0 [ 151.260755][T10176] __vmalloc_node_range_noprof+0x2a5/0xe70 [ 151.260777][T10176] ? __alloc_frozen_pages_noprof+0x194/0x340 [ 151.260802][T10176] ? ___kmalloc_large_node+0xba/0x120 [ 151.260877][T10176] ? __kmalloc_node_noprof+0x2f3/0x410 [ 151.260905][T10176] ? __kvmalloc_node_noprof+0x72/0x170 [ 151.260942][T10176] ? bpf_check+0xdc/0xc060 [ 151.260959][T10176] vzalloc_noprof+0x5e/0x70 [ 151.260979][T10176] ? bpf_check+0xdc/0xc060 [ 151.260996][T10176] bpf_check+0xdc/0xc060 [ 151.261034][T10176] ? __rcu_read_unlock+0x4e/0x70 [ 151.261052][T10176] ? obj_cgroup_charge_pages+0x13d/0x1a0 [ 151.261081][T10176] ? __rcu_read_unlock+0x4e/0x70 [ 151.261213][T10176] ? __memcg_kmem_charge_page+0xd2/0x170 [ 151.261306][T10176] ? __alloc_frozen_pages_noprof+0x1bc/0x340 [ 151.261359][T10176] ? alloc_pages_bulk_noprof+0x3a0/0x570 [ 151.261382][T10176] ? __vmap_pages_range_noflush+0x940/0x960 [ 151.261401][T10176] ? _find_next_zero_bit+0x29/0x90 [ 151.261426][T10176] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 151.261484][T10176] ? cgroup_rstat_updated+0x9f/0x570 [ 151.261535][T10176] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 151.261568][T10176] ? pcpu_chunk_relocate+0x183/0x280 [ 151.261636][T10176] ? __mod_memcg_state+0x122/0x280 [ 151.261659][T10176] ? __rcu_read_unlock+0x4e/0x70 [ 151.261681][T10176] ? pcpu_memcg_post_alloc_hook+0x158/0x1c0 [ 151.261721][T10176] ? bpf_prog_alloc+0x59/0x150 [ 151.261754][T10176] ? should_fail_ex+0xd7/0x260 [ 151.261795][T10176] ? selinux_bpf_prog_load+0x35/0xe0 [ 151.261823][T10176] ? should_failslab+0x8f/0xb0 [ 151.261879][T10176] ? __kmalloc_cache_noprof+0x186/0x320 [ 151.261910][T10176] ? selinux_bpf_prog_load+0xbb/0xe0 [ 151.261931][T10176] bpf_prog_load+0xed3/0x1070 [ 151.261970][T10176] ? __rcu_read_unlock+0x4e/0x70 [ 151.261996][T10176] __sys_bpf+0x463/0x7a0 [ 151.262024][T10176] __x64_sys_bpf+0x43/0x50 [ 151.262044][T10176] x64_sys_call+0x2914/0x2dc0 [ 151.262066][T10176] do_syscall_64+0xc9/0x1c0 [ 151.262101][T10176] ? clear_bhb_loop+0x55/0xb0 [ 151.262129][T10176] ? clear_bhb_loop+0x55/0xb0 [ 151.262153][T10176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.262176][T10176] RIP: 0033:0x7fe51111cd29 [ 151.262189][T10176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.262264][T10176] RSP: 002b:00007fe50f787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.262281][T10176] RAX: ffffffffffffffda RBX: 00007fe511335fa0 RCX: 00007fe51111cd29 [ 151.262291][T10176] RDX: 0000000000000090 RSI: 0000000020000880 RDI: 0000000000000005 [ 151.262302][T10176] RBP: 00007fe50f787090 R08: 0000000000000000 R09: 0000000000000000 [ 151.262312][T10176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.262397][T10176] R13: 0000000000000000 R14: 00007fe511335fa0 R15: 00007fff1f00c158 [ 151.262412][T10176] [ 151.262418][T10176] Mem-Info: [ 151.587623][T10176] active_anon:8356 inactive_anon:4 isolated_anon:0 [ 151.587623][T10176] active_file:6669 inactive_file:12526 isolated_file:0 [ 151.587623][T10176] unevictable:0 dirty:272 writeback:0 [ 151.587623][T10176] slab_reclaimable:3185 slab_unreclaimable:33331 [ 151.587623][T10176] mapped:28705 shmem:4868 pagetables:1123 [ 151.587623][T10176] sec_pagetables:0 bounce:0 [ 151.587623][T10176] kernel_misc_reclaimable:0 [ 151.587623][T10176] free:1864270 free_pcp:9991 free_cma:0 [ 151.632559][T10176] Node 0 active_anon:33424kB inactive_anon:16kB active_file:26676kB inactive_file:50104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114820kB dirty:1088kB writeback:0kB shmem:19472kB writeback_tmp:0kB kernel_stack:3168kB pagetables:4492kB sec_pagetables:0kB all_unreclaimable? no [ 151.660727][T10176] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.687607][T10176] lowmem_reserve[]: 0 2885 7863 0 [ 151.692729][T10176] Node 0 DMA32 free:2950864kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954496kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 151.721511][T10176] lowmem_reserve[]: 0 0 4978 0 [ 151.726387][T10176] Node 0 Normal free:4491088kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:33424kB inactive_anon:16kB active_file:26676kB inactive_file:50104kB unevictable:0kB writepending:1088kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:36004kB local_pcp:7184kB free_cma:0kB [ 151.756787][T10176] lowmem_reserve[]: 0 0 0 0 [ 151.761420][T10176] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 151.774209][T10176] Node 0 DMA32: 4*4kB (M) 0*8kB 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950864kB [ 151.789960][T10176] Node 0 Normal: 653*4kB (UME) 463*8kB (UME) 435*16kB (UM) 175*32kB (UME) 64*64kB (UME) 45*128kB (UME) 29*256kB (UME) 25*512kB (UE) 86*1024kB (UME) 40*2048kB (UM) 1043*4096kB (UM) = 4491068kB [ 151.809049][T10176] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 151.818833][T10176] 24068 total pagecache pages [ 151.823568][T10176] 6 pages in swap cache [ 151.827745][T10176] Free swap = 124668kB [ 151.831898][T10176] Total swap = 124996kB [ 151.836072][T10176] 2097051 pages RAM [ 151.839877][T10176] 0 pages HighMem/MovableOnly [ 151.844541][T10176] 80035 pages reserved [ 151.922833][T10194] loop8: detected capacity change from 0 to 512 [ 152.029525][T10194] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 152.077381][T10194] EXT4-fs (loop8): 1 truncate cleaned up [ 152.218755][T10214] loop8: detected capacity change from 0 to 512 [ 152.480327][T10231] loop5: detected capacity change from 0 to 2048 [ 152.531868][T10234] loop1: detected capacity change from 0 to 2048 [ 152.550560][T10231] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2208'. [ 152.605774][T10234] delete_channel: no stack [ 152.632276][T10234] delete_channel: no stack [ 152.666695][T10248] loop5: detected capacity change from 0 to 512 [ 152.674048][T10248] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 152.696675][T10248] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 152.791259][T10260] loop5: detected capacity change from 0 to 512 [ 152.798049][T10263] xt_hashlimit: size too large, truncated to 1048576 [ 152.810063][T10260] EXT4-fs: inline encryption not supported [ 152.955009][T10260] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 153.037339][T10272] veth0_to_team: entered promiscuous mode [ 153.040661][T10271] loop4: detected capacity change from 0 to 164 [ 153.043159][T10272] veth0_to_team: entered allmulticast mode [ 153.057545][T10271] Unable to read rock-ridge attributes [ 153.099803][T10276] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2220'. [ 153.215759][T10284] FAULT_INJECTION: forcing a failure. [ 153.215759][T10284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.228982][T10284] CPU: 1 UID: 0 PID: 10284 Comm: syz.5.2224 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 153.229052][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.229064][T10284] Call Trace: [ 153.229070][T10284] [ 153.229078][T10284] dump_stack_lvl+0xf2/0x150 [ 153.229112][T10284] dump_stack+0x15/0x1a [ 153.229146][T10284] should_fail_ex+0x24a/0x260 [ 153.229184][T10284] should_fail+0xb/0x10 [ 153.229221][T10284] should_fail_usercopy+0x1a/0x20 [ 153.229243][T10284] _copy_from_iter+0xd5/0xd00 [ 153.229265][T10284] ? kmalloc_reserve+0x16e/0x190 [ 153.229330][T10284] ? __build_skb_around+0x196/0x1f0 [ 153.229360][T10284] ? __alloc_skb+0x21f/0x310 [ 153.229388][T10284] ? __virt_addr_valid+0x1ed/0x250 [ 153.229412][T10284] ? __check_object_size+0x364/0x520 [ 153.229513][T10284] netlink_sendmsg+0x460/0x6e0 [ 153.229558][T10284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.229599][T10284] __sock_sendmsg+0x140/0x180 [ 153.229624][T10284] ____sys_sendmsg+0x312/0x410 [ 153.229678][T10284] __sys_sendmsg+0x19d/0x230 [ 153.229749][T10284] __x64_sys_sendmsg+0x46/0x50 [ 153.229796][T10284] x64_sys_call+0x2734/0x2dc0 [ 153.229844][T10284] do_syscall_64+0xc9/0x1c0 [ 153.229941][T10284] ? clear_bhb_loop+0x55/0xb0 [ 153.230056][T10284] ? clear_bhb_loop+0x55/0xb0 [ 153.230110][T10284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.230144][T10284] RIP: 0033:0x7f9d9503cd29 [ 153.230203][T10284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.230220][T10284] RSP: 002b:00007f9d936a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.230322][T10284] RAX: ffffffffffffffda RBX: 00007f9d95255fa0 RCX: 00007f9d9503cd29 [ 153.230334][T10284] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 153.230347][T10284] RBP: 00007f9d936a1090 R08: 0000000000000000 R09: 0000000000000000 [ 153.230359][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.230369][T10284] R13: 0000000000000000 R14: 00007f9d95255fa0 R15: 00007fffb36b0308 [ 153.230387][T10284] [ 153.808619][T10300] loop5: detected capacity change from 0 to 512 [ 153.853698][T10300] EXT4-fs: Ignoring removed oldalloc option [ 153.894648][T10300] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 153.931167][T10300] EXT4-fs (loop5): 1 truncate cleaned up [ 154.018465][T10311] loop4: detected capacity change from 0 to 2048 [ 154.061260][T10311] delete_channel: no stack [ 154.066579][T10311] delete_channel: no stack [ 154.144972][T10322] serio: Serial port ptm0 [ 154.204606][T10328] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 154.609647][T10348] netlink: 'syz.9.2248': attribute type 1 has an invalid length. [ 154.682305][ T1052] kernel write not supported for file /vcs (pid: 1052 comm: kworker/0:2) [ 154.809016][T10358] loop5: detected capacity change from 0 to 512 [ 154.860023][ T29] kauditd_printk_skb: 1428 callbacks suppressed [ 154.860041][ T29] audit: type=1326 audit(13949736.573:22063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.5.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d9503b98a code=0x7ffc0000 [ 154.860535][T10358] EXT4-fs: inline encryption not supported [ 154.882602][ T29] audit: type=1326 audit(13949736.573:22064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.5.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d9503b98a code=0x7ffc0000 [ 154.919073][ T29] audit: type=1326 audit(13949736.573:22065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.5.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9d9503b597 code=0x7ffc0000 [ 154.942551][ T29] audit: type=1326 audit(13949736.573:22066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.5.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9d9503e4ca code=0x7ffc0000 [ 155.003577][T10358] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 155.028183][T10368] loop8: detected capacity change from 0 to 512 [ 155.060725][ T29] audit: type=1326 audit(13949736.713:22067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.5.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d9503b690 code=0x7ffc0000 [ 155.084274][ T29] audit: type=1326 audit(13949736.713:22068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.5.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9d9503ba77 code=0x7ffc0000 [ 155.107721][ T29] audit: type=1326 audit(13949736.713:22069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.5.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d9503b690 code=0x7ffc0000 [ 155.131226][ T29] audit: type=1326 audit(13949736.713:22070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.5.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9503cd29 code=0x7ffc0000 [ 155.154938][ T29] audit: type=1326 audit(13949736.713:22071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.5.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9503cd29 code=0x7ffc0000 [ 155.178563][ T29] audit: type=1326 audit(13949736.713:22072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.5.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d9503cd29 code=0x7ffc0000 [ 155.215865][T10368] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 155.250888][T10368] EXT4-fs (loop8): 1 truncate cleaned up [ 155.328363][T10381] serio: Serial port ptm0 [ 155.359974][T10368] tmpfs: Unsupported parameter 'huge' [ 155.472956][T10391] loop4: detected capacity change from 0 to 512 [ 155.509407][T10391] EXT4-fs: inline encryption not supported [ 155.551715][T10398] xt_hashlimit: size too large, truncated to 1048576 [ 155.575651][T10391] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 155.588415][T10394] delete_channel: no stack [ 155.592991][T10394] delete_channel: no stack [ 155.787923][T10376] pim6reg1: entered promiscuous mode [ 155.793309][T10376] pim6reg1: entered allmulticast mode [ 155.864382][T10408] team0 (unregistering): Port device team_slave_0 removed [ 155.907348][T10408] team0 (unregistering): Port device team_slave_1 removed [ 155.990411][T10421] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2269'. [ 156.015824][T10419] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2269'. [ 157.265273][T10438] loop1: detected capacity change from 0 to 512 [ 157.440897][T10436] lo speed is unknown, defaulting to 1000 [ 157.510855][T10438] EXT4-fs: inline encryption not supported [ 157.540423][T10425] loop5: detected capacity change from 0 to 512 [ 157.619210][T10425] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 157.637468][T10437] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 157.739211][T10425] EXT4-fs (loop5): 1 orphan inode deleted [ 157.744995][T10425] EXT4-fs (loop5): 1 truncate cleaned up [ 157.821921][T10425] EXT4-fs mount: 43 callbacks suppressed [ 157.821938][T10425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.875793][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.931131][T10454] loop8: detected capacity change from 0 to 164 [ 158.019537][T10454] Unable to read rock-ridge attributes [ 158.134659][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.398161][T10466] loop5: detected capacity change from 0 to 512 [ 158.432855][T10466] EXT4-fs: inline encryption not supported [ 158.488153][T10466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.509252][T10466] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 158.537028][T10463] pim6reg1: entered promiscuous mode [ 158.542439][T10463] pim6reg1: entered allmulticast mode [ 158.624171][T10474] team0 (unregistering): Port device team_slave_0 removed [ 158.640592][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.676214][T10474] team0 (unregistering): Port device team_slave_1 removed [ 158.752026][T10477] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2290'. [ 158.826988][T10475] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2290'. [ 158.992173][T10503] loop5: detected capacity change from 0 to 512 [ 158.993267][T10505] loop1: detected capacity change from 0 to 512 [ 159.018626][T10503] ext2: Bad value for 'journal_dev' [ 159.046498][T10491] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 159.064061][T10505] EXT4-fs: inline encryption not supported [ 159.099082][T10505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.124927][T10508] loop8: detected capacity change from 0 to 512 [ 159.140467][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.150444][T10515] FAULT_INJECTION: forcing a failure. [ 159.150444][T10515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.157021][T10508] EXT4-fs: inline encryption not supported [ 159.163630][T10515] CPU: 0 UID: 0 PID: 10515 Comm: syz.5.2303 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 159.163663][T10515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 159.163684][T10515] Call Trace: [ 159.163692][T10515] [ 159.163701][T10515] dump_stack_lvl+0xf2/0x150 [ 159.163737][T10515] dump_stack+0x15/0x1a [ 159.163762][T10515] should_fail_ex+0x24a/0x260 [ 159.163875][T10515] should_fail+0xb/0x10 [ 159.163915][T10515] should_fail_usercopy+0x1a/0x20 [ 159.163953][T10515] _copy_from_user+0x1c/0xa0 [ 159.164037][T10515] copy_msghdr_from_user+0x54/0x2a0 [ 159.164067][T10515] ? __fget_files+0x17c/0x1c0 [ 159.164155][T10515] do_recvmmsg+0x256/0x6d0 [ 159.164211][T10515] __x64_sys_recvmmsg+0xe2/0x170 [ 159.164268][T10515] x64_sys_call+0x2a9a/0x2dc0 [ 159.164512][T10515] do_syscall_64+0xc9/0x1c0 [ 159.164540][T10515] ? clear_bhb_loop+0x55/0xb0 [ 159.164566][T10515] ? clear_bhb_loop+0x55/0xb0 [ 159.164597][T10515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.164677][T10515] RIP: 0033:0x7f9d9503cd29 [ 159.164695][T10515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.164721][T10515] RSP: 002b:00007f9d936a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 159.164743][T10515] RAX: ffffffffffffffda RBX: 00007f9d95255fa0 RCX: 00007f9d9503cd29 [ 159.164769][T10515] RDX: 0000000000000001 RSI: 00000000200050c0 RDI: 0000000000000004 [ 159.164805][T10515] RBP: 00007f9d936a1090 R08: 0000000000000000 R09: 0000000000000000 [ 159.164819][T10515] R10: 0000000040000002 R11: 0000000000000246 R12: 0000000000000001 [ 159.164833][T10515] R13: 0000000000000000 R14: 00007f9d95255fa0 R15: 00007fffb36b0308 [ 159.164860][T10515] [ 159.357855][T10522] loop1: detected capacity change from 0 to 512 [ 159.366312][T10522] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.384693][T10522] EXT4-fs (loop1): 1 truncate cleaned up [ 159.391823][T10522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.446831][T10508] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.469806][T10522] Process accounting resumed [ 159.472301][T10508] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 159.477710][T10529] loop5: detected capacity change from 0 to 512 [ 159.493230][T10529] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.494112][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.522417][T10529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.540214][T10529] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2309: corrupted inode contents [ 159.559358][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.568650][T10529] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.2309: mark_inode_dirty error [ 159.598664][T10529] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2309: corrupted inode contents [ 159.634783][T10538] serio: Serial port ptm0 [ 159.658112][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.777241][T10551] loop4: detected capacity change from 0 to 512 [ 159.816709][T10551] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.856977][T10551] EXT4-fs (loop4): 1 truncate cleaned up [ 159.863194][T10551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.913176][T10551] tmpfs: Unsupported parameter 'huge' [ 159.928262][ T29] kauditd_printk_skb: 950 callbacks suppressed [ 159.928275][ T29] audit: type=1326 audit(13949741.643:23023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35532cd29 code=0x7ffc0000 [ 159.975927][T10567] loop1: detected capacity change from 0 to 2048 [ 159.982854][T10568] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2323'. [ 159.985260][ T29] audit: type=1326 audit(13949741.643:23024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35532cd29 code=0x7ffc0000 [ 160.001191][T10566] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2323'. [ 160.015562][ T29] audit: type=1326 audit(13949741.643:23025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff35532cd29 code=0x7ffc0000 [ 160.048326][ T29] audit: type=1326 audit(13949741.643:23026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35532cd29 code=0x7ffc0000 [ 160.071879][ T29] audit: type=1326 audit(13949741.643:23027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35532cd29 code=0x7ffc0000 [ 160.095342][ T29] audit: type=1326 audit(13949741.643:23028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff35532cd29 code=0x7ffc0000 [ 160.118776][ T29] audit: type=1326 audit(13949741.643:23029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff35532cd63 code=0x7ffc0000 [ 160.142107][ T29] audit: type=1326 audit(13949741.673:23030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff35532b7df code=0x7ffc0000 [ 160.165561][ T29] audit: type=1326 audit(13949741.693:23031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff35532cdb7 code=0x7ffc0000 [ 160.188970][ T29] audit: type=1326 audit(13949741.693:23032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff35532b690 code=0x7ffc0000 [ 160.223218][T10567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.351956][ T5417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.370599][T10567] delete_channel: no stack [ 160.383232][T10567] delete_channel: no stack [ 160.398842][T10572] pim6reg1: entered promiscuous mode [ 160.404181][T10572] pim6reg1: entered allmulticast mode [ 160.640467][T10561] loop8: detected capacity change from 0 to 2048 [ 160.663275][T10596] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2334'. [ 160.701743][T10592] lo speed is unknown, defaulting to 1000 [ 160.715860][T10561] Alternate GPT is invalid, using primary GPT. [ 160.722296][T10561] loop8: p2 p3 p7 [ 160.734287][T10598] loop5: detected capacity change from 0 to 512 [ 160.740916][T10598] EXT4-fs: inline encryption not supported [ 160.782861][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.815458][T10604] tmpfs: Unsupported parameter 'huge' [ 160.843937][T10598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.916493][T10598] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 160.964135][T10609] loop1: detected capacity change from 0 to 512 [ 160.985516][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.998743][T10609] EXT4-fs: inline encryption not supported [ 161.049355][T10609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.051943][T10616] loop8: detected capacity change from 0 to 512 [ 161.069087][T10616] EXT4-fs: inline encryption not supported [ 161.081793][T10609] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 161.115152][T10621] loop5: detected capacity change from 0 to 512 [ 161.123950][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.134075][T10630] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2343'. [ 161.144982][T10616] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.160329][T10621] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 161.171194][T10625] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2343'. [ 161.193853][T10616] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 161.231430][T10621] EXT4-fs (loop5): 1 truncate cleaned up [ 161.241230][T10621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.269482][T10635] delete_channel: no stack [ 161.274065][T10635] delete_channel: no stack [ 161.295387][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.304699][T10637] loop4: detected capacity change from 0 to 2048 [ 161.323844][T10621] Process accounting resumed [ 161.334546][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.344375][T10637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.362239][T10643] loop1: detected capacity change from 0 to 512 [ 161.370895][T10643] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.380534][T10637] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.2347: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 161.412633][T10637] EXT4-fs (loop4): Remounting filesystem read-only [ 161.419459][T10637] binfmt_misc: register: failed to install interpreter file ./file2 [ 161.427735][ T5493] page_pool_release_retry() stalled pool shutdown: id 76, 1 inflight 60 sec [ 161.441626][T10643] EXT4-fs (loop1): 1 truncate cleaned up [ 161.454926][T10643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.471271][T10647] loop8: detected capacity change from 0 to 512 [ 161.478869][T10647] EXT4-fs: inline encryption not supported [ 161.488994][T10637] netlink: 'syz.4.2347': attribute type 27 has an invalid length. [ 161.498698][T10643] tmpfs: Unsupported parameter 'huge' [ 161.509094][T10647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.526130][T10647] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 161.593217][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.624829][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.671029][T10669] FAULT_INJECTION: forcing a failure. [ 161.671029][T10669] name failslab, interval 1, probability 0, space 0, times 0 [ 161.683831][T10669] CPU: 1 UID: 0 PID: 10669 Comm: syz.8.2352 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 161.683866][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 161.683883][T10669] Call Trace: [ 161.683891][T10669] [ 161.683901][T10669] dump_stack_lvl+0xf2/0x150 [ 161.683939][T10669] dump_stack+0x15/0x1a [ 161.683976][T10669] should_fail_ex+0x24a/0x260 [ 161.684020][T10669] should_failslab+0x8f/0xb0 [ 161.684054][T10669] __kmalloc_noprof+0xab/0x3f0 [ 161.684095][T10669] ? security_prepare_creds+0x53/0x120 [ 161.684157][T10669] security_prepare_creds+0x53/0x120 [ 161.684199][T10669] prepare_creds+0x346/0x480 [ 161.684237][T10669] lookup_user_key+0x132/0xdf0 [ 161.684285][T10669] ? should_fail_ex+0xd7/0x260 [ 161.684357][T10669] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 161.684401][T10669] __se_sys_add_key+0x24b/0x320 [ 161.684429][T10669] ? fput+0x1c4/0x200 [ 161.684553][T10669] __x64_sys_add_key+0x67/0x80 [ 161.684583][T10669] x64_sys_call+0x2964/0x2dc0 [ 161.684615][T10669] do_syscall_64+0xc9/0x1c0 [ 161.684645][T10669] ? clear_bhb_loop+0x55/0xb0 [ 161.684707][T10669] ? clear_bhb_loop+0x55/0xb0 [ 161.684740][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.684822][T10669] RIP: 0033:0x7f8cf24bcd29 [ 161.684840][T10669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.684863][T10669] RSP: 002b:00007f8cf0b21038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 161.684900][T10669] RAX: ffffffffffffffda RBX: 00007f8cf26d5fa0 RCX: 00007f8cf24bcd29 [ 161.684915][T10669] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000020000280 [ 161.684930][T10669] RBP: 00007f8cf0b21090 R08: ffffffffffffffff R09: 0000000000000000 [ 161.684945][T10669] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 161.684968][T10669] R13: 0000000000000000 R14: 00007f8cf26d5fa0 R15: 00007ffe94e26f68 [ 161.684991][T10669] [ 161.946884][T10681] loop1: detected capacity change from 0 to 512 [ 161.974487][T10683] xt_hashlimit: size too large, truncated to 1048576 [ 161.987574][T10681] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.072523][T10637] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.079699][T10637] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.203403][T10681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.234744][T10681] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.2356: corrupted inode contents [ 162.247530][T10681] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.2356: mark_inode_dirty error [ 162.259140][T10681] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.2356: corrupted inode contents [ 162.334335][T10694] loop8: detected capacity change from 0 to 512 [ 162.342788][T10694] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 162.373788][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.383021][T10694] EXT4-fs (loop8): 1 truncate cleaned up [ 162.389364][T10694] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.455654][T10701] xt_hashlimit: size too large, truncated to 1048576 [ 162.497067][T10694] tmpfs: Unsupported parameter 'huge' [ 162.628227][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.879665][T10637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.919027][T10637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.991561][T10637] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.000127][T10637] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.008608][T10637] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.017180][T10637] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.070063][T10655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.081479][T10655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.129145][T10720] team0 (unregistering): Port device team_slave_0 removed [ 163.168428][T10720] team0 (unregistering): Port device team_slave_1 removed [ 163.184590][ T5417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.188738][T10729] loop5: detected capacity change from 0 to 512 [ 163.212646][T10716] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2371'. [ 163.242896][T10729] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.270001][T10729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.309114][T10729] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2373: corrupted inode contents [ 163.322177][T10729] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.2373: mark_inode_dirty error [ 163.334466][T10729] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2373: corrupted inode contents [ 163.350321][T10742] loop4: detected capacity change from 0 to 512 [ 163.369600][T10742] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.384916][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.411678][T10742] EXT4-fs (loop4): 1 truncate cleaned up [ 163.427162][T10742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.464698][T10742] tmpfs: Unsupported parameter 'huge' [ 163.564772][ T5417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.596982][T10754] loop5: detected capacity change from 0 to 512 [ 163.600367][T10756] loop8: detected capacity change from 0 to 512 [ 163.620710][T10754] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 163.629191][T10754] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2382: invalid indirect mapped block 2683928664 (level 1) [ 163.646329][T10754] EXT4-fs (loop5): 1 truncate cleaned up [ 163.656003][T10754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.675555][T10756] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.700987][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.701140][T10766] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2386'. [ 163.730290][T10768] loop4: detected capacity change from 0 to 2048 [ 163.741756][T10756] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.744846][T10770] serio: Serial port ptm0 [ 163.777624][T10768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.809330][T10756] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.2385: corrupted inode contents [ 163.823556][T10756] EXT4-fs error (device loop8): ext4_dirty_inode:6042: inode #2: comm syz.8.2385: mark_inode_dirty error [ 163.835174][T10756] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.2385: corrupted inode contents [ 163.907795][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.940378][T10787] loop1: detected capacity change from 0 to 512 [ 163.950121][T10787] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 163.971272][T10787] EXT4-fs (loop1): 1 truncate cleaned up [ 163.984153][T10787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.011871][T10793] loop8: detected capacity change from 0 to 512 [ 164.019134][T10793] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 164.063001][T10787] Process accounting resumed [ 164.076053][T10793] EXT4-fs (loop8): 1 truncate cleaned up [ 164.081709][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2398'. [ 164.082139][T10793] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.101500][T10798] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2398'. [ 164.120046][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.147537][T10793] tmpfs: Unsupported parameter 'huge' [ 164.298119][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.363682][T10811] loop5: detected capacity change from 0 to 512 [ 164.370340][T10811] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 164.431794][T10814] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 164.433506][T10820] loop1: detected capacity change from 0 to 512 [ 164.475904][T10820] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.522557][T10814] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 164.522720][T10823] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 164.535017][T10814] EXT4-fs (loop4): This should not happen!! Data will be lost [ 164.535017][T10814] [ 164.553988][T10814] EXT4-fs (loop4): Total free blocks count 0 [ 164.560068][T10814] EXT4-fs (loop4): Free/Dirty block details [ 164.566006][T10814] EXT4-fs (loop4): free_blocks=2415919104 [ 164.571752][T10814] EXT4-fs (loop4): dirty_blocks=32 [ 164.576901][T10814] EXT4-fs (loop4): Block reservation details [ 164.582925][T10814] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 164.610293][T10820] EXT4-fs (loop1): 1 orphan inode deleted [ 164.616118][T10820] EXT4-fs (loop1): 1 truncate cleaned up [ 164.642940][T10820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.744447][ T55] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 164.789789][T10844] loop8: detected capacity change from 0 to 256 [ 164.806194][T10844] vfat: Bad value for 'shortname' [ 164.858555][T10849] loop4: detected capacity change from 0 to 512 [ 164.875631][T10849] EXT4-fs: inline encryption not supported [ 164.908622][T10849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.936743][ T29] kauditd_printk_skb: 1052 callbacks suppressed [ 164.936761][ T29] audit: type=1326 audit(13949746.653:24085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff355323ce7 code=0x7ffc0000 [ 164.944967][T10849] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 165.002680][ T29] audit: type=1326 audit(13949746.693:24086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3552c8f29 code=0x7ffc0000 [ 165.026337][ T29] audit: type=1326 audit(13949746.693:24087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff355323ce7 code=0x7ffc0000 [ 165.049735][ T29] audit: type=1326 audit(13949746.693:24088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3552c8f29 code=0x7ffc0000 [ 165.073377][ T29] audit: type=1326 audit(13949746.693:24089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff355323ce7 code=0x7ffc0000 [ 165.097011][ T29] audit: type=1326 audit(13949746.693:24090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3552c8f29 code=0x7ffc0000 [ 165.120539][ T29] audit: type=1326 audit(13949746.693:24091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff35532cd29 code=0x7ffc0000 [ 165.143801][ T29] audit: type=1326 audit(13949746.693:24092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff355323ce7 code=0x7ffc0000 [ 165.167584][ T29] audit: type=1326 audit(13949746.693:24093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3552c8f29 code=0x7ffc0000 [ 165.190940][ T29] audit: type=1326 audit(13949746.693:24094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff35532cd29 code=0x7ffc0000 [ 165.249998][ T5417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.260691][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.311307][T10867] team0 (unregistering): Port device team_slave_0 removed [ 165.336508][T10867] team0 (unregistering): Port device team_slave_1 removed [ 165.398529][T10878] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2428'. [ 165.764846][T10896] loop8: detected capacity change from 0 to 512 [ 165.772145][T10892] lo speed is unknown, defaulting to 1000 [ 165.785813][T10896] EXT4-fs: inline encryption not supported [ 165.824512][T10896] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.838024][T10901] loop1: detected capacity change from 0 to 512 [ 165.844681][T10901] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 165.900078][T10896] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 165.947897][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.013218][T10904] loop8: detected capacity change from 0 to 512 [ 166.045331][T10904] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 166.066333][T10904] EXT4-fs (loop8): 1 truncate cleaned up [ 166.085807][T10904] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.159508][T10904] Process accounting resumed [ 166.180191][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.184093][T10914] loop5: detected capacity change from 0 to 512 [ 166.199459][T10914] EXT4-fs: inline encryption not supported [ 166.224855][T10916] pim6reg: entered allmulticast mode [ 166.240311][T10914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.253575][T10916] pim6reg: left allmulticast mode [ 166.270060][T10926] xt_hashlimit: size too large, truncated to 1048576 [ 166.276565][T10914] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 166.308513][ T6607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.438467][T10932] loop8: detected capacity change from 0 to 2048 [ 166.465854][T10937] loop5: detected capacity change from 0 to 2048 [ 166.473969][T10932] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.488547][T10937] ext4: Unknown parameter 'nouser_xattr' [ 166.523114][ T5380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.558929][T10943] loop1: detected capacity change from 0 to 512 [ 166.565540][T10943] EXT4-fs: inline encryption not supported [ 166.575164][T10944] loop5: detected capacity change from 0 to 512 [ 166.588150][T10943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.622994][T10944] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.699834][T10948] loop8: detected capacity change from 0 to 512 [ 166.713929][ T9056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.723491][T10944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.749266][T10948] EXT4-fs: inline encryption not supported [ 166.770052][T10944] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2447: corrupted inode contents [ 166.799082][T10944] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.2447: mark_inode_dirty error [ 166.811030][T10948] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 166.833608][T10944] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2447: corrupted inode contents [ 166.908779][T10968] loop8: detected capacity change from 0 to 512 [ 166.933168][T10968] EXT4-fs: inline encryption not supported [ 166.980535][T10968] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 167.084804][T10986] xt_hashlimit: size too large, truncated to 1048576 [ 167.096379][T10985] loop8: detected capacity change from 0 to 164 [ 167.108897][T10985] rock: directory entry would overflow storage [ 167.115182][T10985] rock: sig=0x4f50, size=4, remaining=3 [ 167.120867][T10985] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 167.210467][T10987] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2460'. [ 167.235559][T10993] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2460'. [ 167.302185][T10996] loop4: detected capacity change from 0 to 512 [ 167.309384][T10996] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.340501][T10996] EXT4-fs (loop4): 1 orphan inode deleted [ 167.346745][T10996] EXT4-fs (loop4): 1 truncate cleaned up [ 167.488055][T11017] loop1: detected capacity change from 0 to 512 [ 167.496247][T11017] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.530970][T11017] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.2467: corrupted inode contents [ 167.543521][T11017] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.2467: mark_inode_dirty error [ 167.556948][T11017] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.2467: corrupted inode contents [ 167.639266][T11023] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2468'. [ 168.057056][T11044] loop8: detected capacity change from 0 to 512 [ 168.075418][T11035] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2473'. [ 168.085248][T11042] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2473'. [ 168.100496][T11044] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.140021][T11044] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.2476: corrupted inode contents [ 168.175062][T11044] EXT4-fs error (device loop8): ext4_dirty_inode:6042: inode #2: comm syz.8.2476: mark_inode_dirty error [ 168.204095][T11044] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.2476: corrupted inode contents [ 168.372117][T11061] loop8: detected capacity change from 0 to 512 [ 168.388825][T11061] EXT4-fs: inline encryption not supported [ 168.423269][T11061] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 168.424665][T11075] loop5: detected capacity change from 0 to 512 [ 168.442747][T11075] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.456434][T11075] EXT4-fs (loop5): 1 truncate cleaned up [ 168.487884][T11074] Process accounting resumed [ 168.528761][T11083] xt_hashlimit: size too large, truncated to 1048576 [ 168.904177][T11088] pim6reg1: entered promiscuous mode [ 168.909624][T11088] pim6reg1: entered allmulticast mode [ 169.056601][T11101] loop8: detected capacity change from 0 to 512 [ 169.065049][T11103] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2496'. [ 169.076220][T11103] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2496'. [ 169.094993][T11103] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2496'. [ 169.116204][T11103] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2496'. [ 169.126240][T11101] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.171601][T11101] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.2495: corrupted inode contents [ 169.190215][T11103] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2496'. [ 169.219616][T11101] EXT4-fs error (device loop8): ext4_dirty_inode:6042: inode #2: comm syz.8.2495: mark_inode_dirty error [ 169.286170][T11101] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.2495: corrupted inode contents [ 169.322630][T11117] loop5: detected capacity change from 0 to 512 [ 169.345884][T11117] EXT4-fs: inline encryption not supported [ 169.381802][T11117] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 169.453911][T11131] loop4: detected capacity change from 0 to 512 [ 169.455062][T11128] loop8: detected capacity change from 0 to 512 [ 169.483889][T11131] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 169.504205][T11131] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2503: invalid indirect mapped block 2683928664 (level 1) [ 169.521598][T11128] EXT4-fs: inline encryption not supported [ 169.585695][T11131] EXT4-fs (loop4): 1 truncate cleaned up [ 169.599974][T11128] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 169.687902][T11139] loop4: detected capacity change from 0 to 512 [ 169.715933][T11139] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.763389][T11145] loop5: detected capacity change from 0 to 256 [ 169.773393][T11145] vfat: Bad value for 'shortname' [ 169.785633][T11139] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2507: corrupted inode contents [ 169.841094][T11151] loop1: detected capacity change from 0 to 512 [ 169.858263][T11139] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.2507: mark_inode_dirty error [ 169.871468][T11151] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.880905][T11139] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2507: corrupted inode contents [ 169.922494][T11141] pim6reg1: entered promiscuous mode [ 169.927893][T11141] pim6reg1: entered allmulticast mode [ 169.941740][T11151] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.2510: corrupted inode contents [ 169.980292][T11151] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.2510: mark_inode_dirty error [ 170.007856][ T29] kauditd_printk_skb: 1303 callbacks suppressed [ 170.007944][ T29] audit: type=1326 audit(13949751.723:25398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.8.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf24bcd29 code=0x7ffc0000 [ 170.056345][T11151] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.2510: corrupted inode contents [ 170.068929][ T29] audit: type=1326 audit(13949751.783:25399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.8.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf24bcd29 code=0x7ffc0000 [ 170.214481][T11167] loop4: detected capacity change from 0 to 512 [ 170.237322][T11167] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.273309][T11167] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2513: corrupted inode contents [ 170.298956][T11167] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.2513: mark_inode_dirty error [ 170.340263][ T29] audit: type=1326 audit(13949752.033:25400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.8.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cf24bcd29 code=0x7ffc0000 [ 170.363849][ T29] audit: type=1326 audit(13949752.033:25401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.8.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf24bcd29 code=0x7ffc0000 [ 170.387301][ T29] audit: type=1326 audit(13949752.033:25402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.8.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf24bcd29 code=0x7ffc0000 [ 170.410795][ T29] audit: type=1326 audit(13949752.043:25403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.8.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f8cf24bcd29 code=0x7ffc0000 [ 170.434311][ T29] audit: type=1326 audit(13949752.043:25404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.8.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf24bcd29 code=0x7ffc0000 [ 170.457753][ T29] audit: type=1326 audit(13949752.043:25405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.8.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf24bcd29 code=0x7ffc0000 [ 170.472205][T11167] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2513: corrupted inode contents [ 170.481220][ T29] audit: type=1326 audit(13949752.043:25406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.8.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8cf24bcd29 code=0x7ffc0000 [ 170.516581][ T29] audit: type=1326 audit(13949752.043:25407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.8.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf24bcd29 code=0x7ffc0000 [ 170.552939][T11175] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 170.636719][T11182] loop8: detected capacity change from 0 to 512 [ 170.644289][T11182] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 170.658136][T11182] EXT4-fs (loop8): 1 truncate cleaned up [ 170.670659][T11182] tmpfs: Unsupported parameter 'huge' [ 170.703559][T11187] loop4: detected capacity change from 0 to 512 [ 170.711654][T11187] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.754518][T11191] xt_hashlimit: size too large, truncated to 1048576 [ 170.757976][T11187] EXT4-fs (loop4): 1 orphan inode deleted [ 170.767214][T11187] EXT4-fs (loop4): 1 truncate cleaned up [ 170.914467][T11199] loop8: detected capacity change from 0 to 2048 [ 170.988794][T11199] EXT4-fs error (device loop8): ext4_find_extent:938: inode #2: comm syz.8.2523: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 171.029907][T11199] EXT4-fs (loop8): Remounting filesystem read-only [ 171.051048][T11199] binfmt_misc: register: failed to install interpreter file ./file2 [ 171.124316][T11199] netlink: 'syz.8.2523': attribute type 27 has an invalid length. [ 171.188430][T11199] sit0: left allmulticast mode [ 171.193959][T11199] 0ªX¹¦À: left allmulticast mode [ 171.202253][T11199] vlan2: left promiscuous mode [ 171.227761][T11199] bond1: left promiscuous mode [ 171.236437][T11199] vlan3: left promiscuous mode [ 171.259885][T11199] ip6gre1: left allmulticast mode [ 171.279805][T11199] hsr1: left allmulticast mode [ 171.284619][T11199] syz_tun: left allmulticast mode [ 171.289830][T11199] batadv_slave_0: left allmulticast mode [ 171.379126][T11233] loop8: detected capacity change from 0 to 512 [ 171.397813][T11233] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 171.426412][T11233] EXT4-fs (loop8): 1 truncate cleaned up [ 171.488991][T11233] Process accounting resumed [ 171.561886][T11242] loop8: detected capacity change from 0 to 512 [ 171.597014][T11242] EXT4-fs: inline encryption not supported [ 171.629890][T11242] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 171.834130][T11255] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 171.849680][T11234] loop1: detected capacity change from 0 to 2048 [ 171.898767][T11234] Alternate GPT is invalid, using primary GPT. [ 171.905163][T11234] loop1: p2 p3 p7 [ 172.103980][T11266] loop8: detected capacity change from 0 to 512 [ 172.111119][T11266] EXT4-fs: inline encryption not supported [ 172.150994][T11266] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 172.290130][T11287] serio: Serial port ptm0 [ 172.298654][T11292] __nla_validate_parse: 4 callbacks suppressed [ 172.298671][T11292] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2552'. [ 172.402615][T11298] loop1: detected capacity change from 0 to 512 [ 172.520245][T11298] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 172.536209][T11303] syzkaller1: entered promiscuous mode [ 172.541749][T11303] syzkaller1: entered allmulticast mode [ 172.594395][T11298] EXT4-fs (loop1): 1 truncate cleaned up [ 172.625794][T11298] Process accounting resumed [ 172.657056][T11313] loop4: detected capacity change from 0 to 512 [ 172.697879][T11315] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 172.720224][T11313] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 172.759086][T11313] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2559: invalid indirect mapped block 2683928664 (level 1) [ 172.824119][T11336] xt_hashlimit: size too large, truncated to 1048576 [ 172.831251][T11313] EXT4-fs (loop4): 1 truncate cleaned up [ 172.869305][T11316] loop8: detected capacity change from 0 to 128 [ 172.888375][T11316] vfat: Unknown parameter 'uni_xl€te' [ 172.969052][T11341] loop4: detected capacity change from 0 to 2048 [ 173.008652][T11341] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.2568: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 173.042649][T11341] EXT4-fs (loop4): Remounting filesystem read-only [ 173.098626][T11341] binfmt_misc: register: failed to install interpreter file ./file2 [ 173.152358][T11341] netlink: 'syz.4.2568': attribute type 27 has an invalid length. [ 173.187325][ T3285] ================================================================== [ 173.195435][ T3285] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode [ 173.203880][ T3285] [ 173.206206][ T3285] read-write to 0xffff8881064e2a38 of 4 bytes by task 5102 on cpu 0: [ 173.214268][ T3285] __writeback_single_inode+0x1f4/0x850 [ 173.219833][ T3285] writeback_sb_inodes+0x461/0xa30 [ 173.224961][ T3285] __writeback_inodes_wb+0x9a/0x1a0 [ 173.230173][ T3285] wb_writeback+0x274/0x640 [ 173.234687][ T3285] wb_workfn+0x615/0x940 [ 173.238940][ T3285] process_scheduled_works+0x483/0x9a0 [ 173.244405][ T3285] worker_thread+0x51d/0x6f0 [ 173.248999][ T3285] kthread+0x4ae/0x520 [ 173.253077][ T3285] ret_from_fork+0x4b/0x60 [ 173.257501][ T3285] ret_from_fork_asm+0x1a/0x30 [ 173.262278][ T3285] [ 173.264602][ T3285] read to 0xffff8881064e2a38 of 4 bytes by task 3285 on cpu 1: [ 173.272147][ T3285] __mark_inode_dirty+0x58/0x7e0 [ 173.277125][ T3285] file_update_time+0x285/0x2b0 [ 173.281990][ T3285] ext4_page_mkwrite+0x19e/0xb70 [ 173.286938][ T3285] do_wp_page+0xca1/0x2340 [ 173.291368][ T3285] handle_mm_fault+0xc63/0x2ac0 [ 173.296234][ T3285] exc_page_fault+0x3b9/0x650 [ 173.300912][ T3285] asm_exc_page_fault+0x26/0x30 [ 173.305770][ T3285] [ 173.308089][ T3285] value changed: 0x0001002a -> 0x00000000 [ 173.313800][ T3285] [ 173.316210][ T3285] Reported by Kernel Concurrency Sanitizer on: [ 173.322360][ T3285] CPU: 1 UID: 0 PID: 3285 Comm: syz-executor Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 173.332959][ T3285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 173.343018][ T3285] ================================================================== [ 173.481546][T11357] loop5: detected capacity change from 0 to 512 [ 173.519056][T11357] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 173.551136][T11357] EXT4-fs (loop5): 1 truncate cleaned up [ 173.618076][T11357] Process accounting resumed